News for hackers. Stuff that matters.
Re:Curl 8.4.0 will be released on October 11 – a fix for a s... by autoexec on Wednesday October 04, 2023 @01:10PM (#37768299)
Here's a link to something other than twitter for those who don't have an account, don't want to login, or don't want to enable javascript

https://github.com/curl/curl/discussions/12026

The CVEs:

CVE-2023-38545: severity HIGH (affects both libcurl and the curl tool)

CVE-2023-38546: severity LOW (affects libcurl only, not the tool)

I really wish people would just stop posting submissions to twitter at this point.

Re:Curl 8.4.0 will be released on October 11 – a fix for a s... by smilingemoji on Wednesday October 04, 2023 @03:13PM (#37770133)
> I really wish people would just stop posting submissions to twitter at this point.

I fully agree. You can also replace twitter.com with nitter.net

https://nitter.net/bagder/status/1709103920914526525?s=46

Re:Curl 8.4.0 will be released on October 11 – a fix for a s... by pornel on Wednesday October 04, 2023 @05:53PM (#37772329)
Re:Curl 8.4.0 will be released on October 11 – a fix for a s... by autoexec on Wednesday October 04, 2023 @07:01PM (#37772919)
Mastodon may not require a login, but for some reason it does insist on javascript
Re:Curl 8.4.0 will be released on October 11 – a fix for a s... by jpizzle71 on Wednesday October 04, 2023 @05:21PM (#37771983)
Probably stupid question, but what versions of curl does this affect?
Re:Curl 8.4.0 will be released on October 11 – a fix for a s... by gray_-_wolf on Wednesday October 04, 2023 @06:23PM (#37772624)
We will know Oct 11 :)
Re:Curl 8.4.0 will be released on October 11 – a fix for a s... by jpizzle71 on Wednesday October 04, 2023 @06:27PM (#37772663)
Oof, that's a daunting thought.

We just did a quick snapshot of a small chunk of a customer's environment and they're running 10 different versions of curl in like 15 different images :(