News for hackers. Stuff that matters.
Re:Ask HN: What in the world is taking Ubuntu so long? by gwbas1c on Monday November 09, 2026 @09:51AM (#50426444)
> Or only the "important" CVEs?

This is why CVEs have severity ratings

> And if two "important" ones come out two days

Yes

> running through the QA pipeline

This is also why customers evaluate the CVE and their risk. The company I work for skipped a patch for a CVE because it was for areas that we don't use and weren't exposed to the public internet.

There are no comments on this comment yet.