alt Hacker NewsAs far as I know the only working exploit is working on machine with MultiTCP enabled. Redhat also downgraded the issue to "high" and also did not release a patch yet. I would have preferred a patch but I accept that they know better than me what they are doing.
Why would they take so long anyway and be behind volunteer run projects like debian? Is it something about corporate shenanigans and testing? because afaik in fedora for example firefox is always behind in security updates compared to debian.