Re:Golang SSH Security
by ymse on Saturday April 15, 2017 @04:43PM
(#14122753)
CVEs can be thought of more as a public security advisory. Many vendors and distributions follow the CVE list. If there was no CVE, this issue might have gone unrecognised in your package manager or paid software product for a long time.
[ Parent
| on HN ]
> your package manager or paid software product
I'd hope these don't use experimental libraries. Although as others pointed out to me, this is not an experimental library :) (which was the answer I was looking for)