Il 13/07/2012 10:50, Stefano Lattarini ha scritto: > Well, I'm really disappointed that nobody reported this upstream to us; > our non-Debian users would have been saved from two and a half years of > potential vulnerability :-/
It's worth noting that I just checked and Gentoo also applies the same patch, for us started by https://bugs.gentoo.org/show_bug.cgi?id=295357 The report quoted there refers to Jim who, if I'm not mistaken, works for RedHat, so I guess RHEL/Fedora/Centos are covered as well. So as much as I'd like to blame Debian, it's not really their fault :) -- Diego Elio Pettenò — Flameeyes flamee...@flameeyes.eu — http://blog.flameeyes.eu/