Jonathan Corbet
corbet
https://lwn.net/Articles/1097401/
Here, evidently, "several vulnerabilities" means "1,313 CVE numbers".
11
45
54
Baloo Uriza
BalooUriza@social.tulsa.ok.us
@corbet Kinda having a hard time trusting CVEs as actually serious given "Microsoft developer got hangnail while testing code" is somehow CVE-worthy these days.
2
0
1
@corbet real ones, or made up by the garbage machine?
0
0
0
bignose
bignose@fosstodon.orgGiven that most of those CVEs will, I predict, turn out to be garbage, and the remaining real vulnerabilities will accurately be characterised as “a few”, yes.
0
0
0
@BalooUriza @corbet And if you try to dispute a CVE that said developer assigns to your project, you will have zero luck. :)
It truly is a terrible program.
1
0
0
@collinfunk Yeah I no longer consider CVEs at all because they've become meaningless.
0
0
0
Wouter Verhelst
wouter@pleroma.debian.socialMy guess is that's why @corbet called them "CVE numbers" and not "security vulnerabilities"...
@corbet
0
0
0
Herr TurTur
messieass@procial.tchncs.de@corbet
Longish list indeed - longest one i’ve ever seen.
0
0
0
d.rift
d_rift@beige.party@corbet the "vulnerability" submission system may be the real vulnerability 🫣 what a mess
0
0
0
Pity the poor security team who had to track all of those IDs.
0
0
0
Russell Coker
etbe@mastodon.nzoss.nz@corbet Wordnet (as a result of running the Debian "dict" command in a fairly default dict setup) says:
several
adj 1: (used with count nouns) of an indefinite number more than 2 or 3 but not many
I hate to imagine what this implies about the definition of "many vulnerabilities" may be.
0
0
0