CVEs vs Advisories with Paul Asadoorian

Mon, 24 Aug 2026 00:00:00 +0000

Josh chats with Paul Asadoorian about a tool he wrote called fettle and a recent report Paul published on CVEs. Fettle is a tool to help update and manage Linux systems. The big sell on this one is checking if your firmware is out of date. We then talk about a report Paul created that doesn’t obsess over CVEs, but rather the vendor updates. It makes more sense to worry about advisories as those are actionable, where CVEs often are not. It’s a great chat and Paul is a legend in the industry.

Fettle on Open Source Security

CVEs vs Advisories with Paul Asadoorian