Debian is used on many servers. I expect that a not insignificant number of them are mission critical.It hasn't been the only fix done lately to DNS servers, but you are on the right track.
Given that this one, has been available since Feb 13 and it hasn't got either to the raspberry or Debian (didn't check other distros) it serves as a good case and point, and reminder, of why a cybersecurity asset register is not only a good idea but a must have. And also, that you need to gather your own threat intelligence, and be prepared to either accept risks or develop your own mitigation plans.
Awareness is key. A sieve is not a good sun blocker.
If Debian has not pushed the fix out, I would guess that it has been determined that this is a very low risk issue. Your own word salad response to my very specific questions is perhaps a good indication of how not critical this issue is to the majority of actual users.
Statistics: Posted by bls — Tue Jun 04, 2024 3:21 am