Severity HIGH security problem to be announced with curl 8.4.0 on Oct 11 · curl/curl · Discussion #12026
github.com
We are cutting the release cycle short and will release curl 8.4.0 on October 11, including fixes for a severity HIGH CVE and one severity LOW. The one rated HIGH is probably the worst curl securit...
  • OsrsNeedsF2P@lemmy.ml
    14·
    2 年前

    Canonical has been aggressively expanding their security team, and Levels.fyi showed last quarter that security researchers were some of the highest paid forms of software development.

    Doesn’t guarantee anything long-term, but there’s a few suggestions that security has gotten a larger focus lately.

    • P03 Locke@lemmy.dbzer0.comEnglish
      4·
      2 年前

      Good. There’s so much chain of trust in the OSS community that it’s hard to keep up with the tens of thousands of libraries that literally hold up the Internet.

      It’s a shame we discover these critical bugs so late in the process, but at least we discover them at all…