Posted by Greg Dahlman on Sep 19 I may be missing something but I do see a path that may be clean without inventing new package manager features or relying on brittle, text-based version strings. The concern regarding loose version matching and local source rebuilds breaking the ABI is real, but IMHO we don't need to invent a new package manager feature to fix it. As long as `CONFIG_MODVERSIONS` is enabled, why not simply hash a sorted version of CRCs Module.symvers,...

Read the full article at oss-security →