Severity HIGH security problem to be announced with curl 8.4.0 on Oct 11 · curl/curl · Discussion #12026
github.com
We are cutting the release cycle short and will release curl 8.4.0 on October 11, including fixes for a severity HIGH CVE and one severity LOW. The one rated HIGH is probably the worst curl securit...
  • ugo
    32·
    9 months ago

    Are we reading the same article? I read it when it came out, and read it a second time now. The article:

    • is not a bitchfit
    • nowhere states CVE is bad or useless (it even links a list of CVEs directly hosted on curl’s website)

    The article is about missing checks in the CVE ecosystem that allows useless fearmongering perpetrated by badly filed CVEs to spread, citing one particular CVE as exemplary of all the faults