Regarding the copyfail vulnerability, we had kernel 7.0 in the testing repository for days now, for both the PineTab2 and PinePhone/Pro. If you're someone trying out new stuffs from that repo then you can ignore this toot. Otherwise you can wait or install the kernel from the danctnix-testing repo.