Neal Gompa wrote:
Well, an easy solution is to make it so "dnf update" is coerced to
"dnf distro-sync" for development releases.
That would not have helped containing this vulnerability. Keeping updates-
testing disabled by default would have.
Kevin Kofler