Comment by jesboat

* Unauthenticated RCE vs all GNU/Linux systems (plus others) disclosed 3 weeks ago.

* Full disclosure happening in less than 2 weeks (as agreed with devs).

* Still no working fix.