On Wed, Nov 14, 2018 at 09:54:45PM +0000, Zbigniew Jędrzejewski-Szmek wrote:
> > The answer is "a lot". I don't think we have
any hard numbers, but
> > see
https://pagure.io/fesco/issue/1935. Generally, it seems we can't
> > process the CVEs we get now.
> > "This result was limited to 1000 bugs." → that's just for CVEs.
> What happens if we limit that to a smaller subset, though?
What do you mean?
There are zillions of CVES across all of the packages in the entire Fedora
collection. How many are there against, say, the subset used for the IoT
spin (and potential future edition)?
--
Matthew Miller
<mattdm(a)fedoraproject.org>
Fedora Project Leader