oss-sec mailing list archives
Re: Estimate for the total number of exploitable bugs in large linux distro?
From: Kristian Fiskerstrand <k_f () gentoo org>
Date: Fri, 14 Jul 2017 20:07:42 +0200
On 07/14/2017 07:52 PM, Javantea wrote:
This shows that GLSAs are neither increasing nor decreasing within the margin of error over the past 10 years.
As a metric it likely doesn't provide much though; a high number of tracked issues are fixed without GLSA, depending on severity and expected install base of the package, and multiple fixes are combined into single GLSAs if related to same package etc, so as a metric it is probably quite bad and number depending on factors such as available manpower from year to year. -- Kristian Fiskerstrand OpenPGP keyblock reachable at hkp://pool.sks-keyservers.net fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
Attachment:
signature.asc
Description: OpenPGP digital signature
Current thread:
- Estimate for the total number of exploitable bugs in large linux distro? Georgi Guninski (Jul 14)
- Re: Estimate for the total number of exploitable bugs in large linux distro? Greg KH (Jul 14)
- Re: Estimate for the total number of exploitable bugs in large linux distro? Steven Miano (Jul 14)
- Re: Estimate for the total number of exploitable bugs in large linux distro? Alan Coopersmith (Jul 14)
- Re: Estimate for the total number of exploitable bugs in large linux distro? Hanno Böck (Jul 14)
- Re: Estimate for the total number of exploitable bugs in large linux distro? Steve Grubb (Jul 14)
- Re: Estimate for the total number of exploitable bugs in large linux distro? Santiago Torres (Jul 14)
- Re: Estimate for the total number of exploitable bugs in large linux distro? Kurt Seifried (Jul 14)
- Re: Estimate for the total number of exploitable bugs in large linux distro? Javantea (Jul 14)
- Re: Estimate for the total number of exploitable bugs in large linux distro? Kristian Fiskerstrand (Jul 14)