Yes, and that's not what people are reporting flaws in. The reports are "this daemon accepts arbitrary code and then runs it!"