u/DarwinKamikaze

I was just updating an older laptop, and was a bit surprised that the kernel it downloaded was 6.18.9 given the recent news regarding the Copy Fail CVE.

I had a look at pacman config, and I realised the top mirror was set to: http://ftp.iinet.net.au/

I switched to the next in my list and it happened to have the exact same (older) package list. The next mirror just happened to be http://mirror.internode.on.net/

Both of these mirrors are woefully out of date. I've removed them from the list, and am now updating to much more recent packages.