Re:Ask HN: What in the world is taking Ubuntu so long?
by gwbas1c on Monday November 09, 2026 @09:51AM
(#50426444)
> Or only the "important" CVEs?
This is why CVEs have severity ratings
> And if two "important" ones come out two days
Yes
> running through the QA pipeline
This is also why customers evaluate the CVE and their risk. The company I work for skipped a patch for a CVE because it was for areas that we don't use and weren't exposed to the public internet.
This is why CVEs have severity ratings
> And if two "important" ones come out two days
Yes
> running through the QA pipeline
This is also why customers evaluate the CVE and their risk. The company I work for skipped a patch for a CVE because it was for areas that we don't use and weren't exposed to the public internet.