Dave Love <loveshack(a)fedoraproject.org> wrote:
I don't
understand why the CVEs were issued, since a problem with unrealistic
input to a (rather rarely used) development tool doesn't strike me as a
security problem.
Your "surely nobody would do that" attitude is one of the major causes
why security holes are so abundant in most of the world's software.
Go fix your buffer overflows! Pronto!
Björn Persson