The “another” is the Firefox based browser Floorp on which Midori is based on since 2023. (source)

Ubuntu 26.04 has already been patched, but not the older (LTS) releases.

https://ubuntu.com/security/CVE-2026-31431

Does Ubuntu, like Debian, make you choose a repository mirror during the installation?

It could be for example Debian 12 (Bookworm). While Debian 13 (Trixie) already got fixed, Bookworm is still vulnerable.

Edit: It just got fixed.

https://security-tracker.debian.org/tracker/CVE-2026-31431

https://github.com/microsoft/edit/releases

they have to follow Ubuntu

Will Ubuntu do a hard replacement of coreutils with coreutils-rust, i.e. the usual C implentation of coreutils won’t be available anymore?

I assume they will simply install coreutils-rust instead of coreutils while keeping the latter in their repositories. So, in theory, Linux Mint may keep using the C implentated coreutils.

The kernel 6.12.73-1 used by Debian Trixie is still vulnerable. Applying security updates should update the kernel to 6.12.85-1 and fix the issue.

https://security-tracker.debian.org/tracker/CVE-2026-31431

Edit: Kernel 6.1.170-1 just got released and fixes the vulnerability.

There usually isn’t a su binary installed on non-rooted Androids. If you’re rooting it yourself anyways, there’s no need to use the exploit.

According to the description, they don’t specify that pip should be executed as root (which is a very bad idea and pip itself will tell one about that).

The question ist on ‘facts’ that aren’t true and superluminal information transport due to quantum entanglement is one of these.