3 ms·
Wouldn't it have made most sense to e-mail the OpenSSL team so they could have pushed a critical patch that everyone would have updated to via APT before shit w
by antihero 13y ago
Wouldn't it have made most sense to e-mail the OpenSSL team so they could have pushed a critical patch that everyone would have updated to via APT before shit went off of the hook?
- mschuster91 13y agoThey did, the problem is that the patch immediately shows you the security issue - and distributing a patch means then to disclose the bug.
- danielweber 13y agoI'm not 100% on the timeline but I'm pretty sure the OpenSSL team knew about this well before April 7th.