I finally came back after touching grass and there is a Linux vulnerability. Probably won’t affect us as the library as it appears to be on the cutting edge/latest release. The servers are on an older Debian release and my personal dedicated server runs Red Hat Enterprise Linux, which uses older versions.
It does show the vulnerability that open source software have. Without regular security audits and code reviews, something like slipping malicious code can slip in until someone eventually discovers it. That is why I’m not comfortable using the bleeding edge of Linux like Fedora or Ubuntu on a server environment. I prefer using something like RHEL or Debian (stable). Don’t need the absolute latest packages on a server.
