@soatok @49016 okay, from link https://www.openwall.com/lists/oss-security/2025/12/28/2 I assume this was indeed published only directly at the conference, without announce to oss-security or better to embargoed distros list. Please avoid publication of vulnerabilities this way, especially this time. If there is something to improve, this is definitely it.