@snow @wolf480pl Or at least gradual disclosure with proper information (say config change or hardening instruction) when there's a need for embargoes (due to how much time even a mitigating patch can take if there's like multiple implementations).

But here I feel like it should just have been: Here's a patch, apply it or disable networking in atop, done.