5 ms·
Documented cases don't seem to be common, but what comes to mind is the Debian "weak keys" scandal (2008), and the VLC "libeml" vulnerability (2019)[1] [1]: ht
by jtl999 6y ago
Documented cases don't seem to be common, but what comes to mind is the Debian "weak keys" scandal (2008), and the VLC "libeml" vulnerability (2019)[1]
[1]: https://old.reddit.com/r/netsec/comments/ch86o6/vlc_security_issue/ https://old.reddit.com/r/netsec/comments/ch86o6/vlc_security...
- joana035 6y agoOpenSSL upstream was almost abandoned during those days. Software are always gonna have bugs, it's written by humans after all. The important thing is to acknowledge and work towards an ideal outcome.
- kasabali 6y agoXweak keys" didn't have anything to do with backporting fixes to older versions. It was introduced into the version in sid at the time.