Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz

[Greg KH <greg () kroah com>]

On Sat, Jun 15, 2019 at 11:49:03AM -0400, Alex Gaynor wrote:
> I do not have a solution to this problem. I wanted to raise awareness of
> it, in the hope that it would start a discussion which might come to a
> solution.

Why not just do a simple "you must upgrade to the latest version X to
fix a bunch of bugs" type of announcement?  No need to worry about crazy
backports and cherry-picking, that always fails in the end.

thanks,

greg k-h