Comment Re:BETTER Mitigation (Score 1) 66
Non-systemd Debian and more and more Devuan here. This is not a high criticality vulnerability, but, after the sshd near-disaster, the second time not running systemd proves to be the right decision.
I can't hear "Debian" and "sshd" and "disaster" in the same sentence without thinking of https://research.swtch.com/ope... (the OpenSSL bug from September 2006). It really took me a minute to realize you were talking about the xz-utils attack.