Jonathan Corbet
corbet
https://lwn.net/Articles/1097401/
Here, evidently, "several vulnerabilities" means "1,313 CVE numbers".
10
51
50
Baloo Uriza
BalooUriza@social.tulsa.ok.us
@corbet Kinda having a hard time trusting CVEs as actually serious given "Microsoft developer got hangnail while testing code" is somehow CVE-worthy these days.
2
0
1
@corbet real ones, or made up by the garbage machine?
0
0
0
bignose
bignose@fosstodon.orgGiven that most of those CVEs will, I predict, turn out to be garbage, and the remaining real vulnerabilities will accurately be characterised as “a few”, yes.
0
0
0
@BalooUriza @corbet And if you try to dispute a CVE that said developer assigns to your project, you will have zero luck. :)
It truly is a terrible program.
1
0
0
@collinfunk Yeah I no longer consider CVEs at all because they've become meaningless.
0
0
0
Wouter Verhelst
wouter@pleroma.debian.socialMy guess is that's why @corbet called them "CVE numbers" and not "security vulnerabilities"...
@corbet
0
0
0
Herr TurTur
messieass@procial.tchncs.de@corbet
Longish list indeed - longest one i’ve ever seen.
0
0
0
d.rift
d_rift@beige.party@corbet the "vulnerability" submission system may be the real vulnerability 🫣 what a mess
0
0
0
Pity the poor security team who had to track all of those IDs.
0
0
0
