[Linux-aus] Now tell the rest of the story...

Tue Mar 23 09:16:01 UTC 2004

Perhaps Anthony Towns would like to comment on this line from the article:

“For example, Debian (Debian GNU/Linux) has left vulnerabilities there
and didn’t release any patches for them.”

Is it just me or did it take months for Microsoft to release a fix for
the ASN.1 vulnerability. I looked it up at the time and I think the
dates for fixes were something like:

Free BSD: 3 October 2003

Debian GNU/Linux: 11 October 2003

Microsoft: February 10, 2004?