432 Linux vulnerabilities

[KGIII]

https://www.techzine.eu/news/security/143110/432-linux-vulnerabilities-put-pressure-on-patch-management/

That article mostly talks about patch management. You might want a different link, but I just picked the first one on offer.

 

[Rocketing-warp9]

More and more Swiss Cheese...
Day In, Day out.
Soon we'll have enough to fill the Grand Canyon.
AI.. Why?
Everything is becoming Swiss cheese!

 

[KGIII]

AI.. Why?

Because it's faster and (sometimes) better than a human. In this case, AI is doing good things. Given how long some of these vulnerabilities have existed, who knows how long it would have been before a human found them.

 

[Rocketing-warp9]

True,

 

[NicWelds]

I suppose on the scale of useful uses for AI, finding bugs in code ranks a lot higher than many of the other popular AI activities.

 

[//////]

finding bugs in code ranks a lot higher than many of the other popular AI activities.

i do check my scripts for bugs using AI. it has opened my eyes how insecure code i have been producing. at least only user (of those programs) is me.

 

[Condobloke]

opened my eyes how insecure code i have been producing. at least only user (of those programs) is me.

That is good that you are, at least, keeping it to yourself !

 

[CaffeineAddict]

i do check my scripts for bugs using AI. it has opened my eyes how insecure code i have been producing. at least only user (of those programs) is me.

AI indeed does very good job when it comes to code analysis, it's not good to write new code but very effective at spotting bugs.

 

[piorunz]

More and more Swiss Cheese...
Day In, Day out.
Soon we'll have enough to fill the Grand Canyon.
AI.. Why?
Everything is becoming Swiss cheese!

AI is doing an amazing job here, as others have noticed in the thread.
Linux kernel code was a Swiss cheese.
Now, it's less so - bugs are being fixed, after all!

 

[Condobloke]

bugs are being fixed, after all!

I note, this morning an update to Thunderbird Email client came down the tubes.

The version number of Thunderbird shifted from 142 to 153.0esr .....in one leap

That, surely, could only be to new "discoveries' being present in the code etc etc, and the necessary changes being implemented.

Carefully considered use of AI

 

[Trml]

My favourite part about this "CVE-drop" discussion on the security mailing list is Greg-KH complimenting the Debian security team for their work.

 

[piorunz]

I note, this morning an update to Thunderbird Email client came down the tubes.

The version number of Thunderbird shifted from 142 to 153.0esr .....in one leap

That, surely, could only be to new "discoveries' being present in the code etc etc, and the necessary changes being implemented.

Carefully considered use of AI

That's actually normal. ESR is an Extended Support Release, designed for corporate users and those who prefer stability. Development has been going on as usual every month, but your ESR install only been receiving security fixes for old, stable 142 version. Now, finally, they bumped all ESR users to 153. You will stay on what version for several months, just like previously with 142.