On: TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

[1over137]

>How are Ubuntu and RHEL not fixed?

IMNSHO this makes them unfit for purpose. I think this is the nail in the coffin for Ubuntu for me.

[tln → 1over137]

It's not a good look.

I pulled in from -proposed this time.

Ubuntu was slow on the brotli / CVE-2026-111497 updates as well.

[mort96 → tln]

And the PHP update, it took like an hour after the embargo ended.

[roygbiv2 → 1over137]

What would you suggest for enterprise use of Linux if RHEL is no longer fit for purpose?

[linsomniac → roygbiv2]

I'd be seriously considering Debian or, hear me out, NixOS. We run all our work servers on Ubuntu, but ~6 months ago I switched my workstation to NixOS and I couldn't be happier. I've been following "latest" or whatever they call it, being able to treat the OS package versions like the rest of our software (update the flake.lock file and then burn it in in dev+stg for ~2 weeks before rolling to prod) is pretty attractive.

[aftbit → linsomniac]

I run Debian on servers and Arch Linux on clients. Debian is definitely the better choice for enterprises.

[lakeviewterrace → linsomniac]

> NixOS

No legit enterprise is running that clownware — ever.

[voakbasda → lakeviewterrace]

It used to be true that no one got fired for buying IBM. Now, I would laugh at any organization that chooses IBM.

Times can change.

[dada216 → voakbasda]

to be fair their storage, and I mean their SANs, is still the best (excluding very expensive alternatives that are only really beating IBM in few limited scenarios).

I still like DB2, but only for banking/finance core stuff, and their mainframes are just unique machines, I'm very fond of them.

[dvdkon → lakeviewterrace]

I certainly know people who run NixOS in commercial production. It's hardly "clownware".

[vsgherzi → lakeviewterrace]

I think helsing and or andruil do?

[aftbit → roygbiv2]

Debian