Comment on ICEBlock handled my vulnerability report in the worst possible way

• corsicanguppy@lemmy.ca ⁨1⁩ ⁨month⁩ ago

  The server was reportedly running 2.4.57 and the CVE was fixed in 2.4.60, so it’s definitely present in the software.

  Overall, I don’t get your point about stable releases and backports.

  Clearly. Hint: it’s what Enterprise Linux has done for 20 years.

  source
• eager_eagle@lemmy.world ⁨1⁩ ⁨month⁩ ago

  Distros don’t update software versions when backporting some things, meaning they add a suffix they control to the version e.g. 2.4.57-ubuntu1.2 whatever, but the version reported by the software itself might still be 2.4.57.

  source
• knobbysideup@sh.itjust.works ⁨1⁩ ⁨month⁩ ago

  Wrong.

  source