Re: [Linux-aus] Now tell the rest of the story...

[Paul Shirren <shirro@shirro.com>]

Perhaps Anthony Towns would like to comment on this line from the article:

“For example, Debian (Debian GNU/Linux) has left vulnerabilities there
and didn’t release any patches for them.”

Is it just me or did it take months for Microsoft to release a fix for
the ASN.1 vulnerability. I looked it up at the time and I think the
dates for fixes were something like:

Free BSD: 3 October 2003

Debian GNU/Linux: 11 October 2003

Microsoft: February 10, 2004?