News for hackers. Stuff that matters.

A comment on Severity HIGH security problem to be announced with curl 8.4.0 on Oct 11. Parent comment

Re:Severity HIGH security problem to be announced with curl ... by nerdponx on Thursday October 05, 2023 @07:21AM (#37777177)
Including mine once the security team sees the CVE warning, even though our image literally never uses curl or libcurl and only ever communicates with other internal systems, within our private network.

Not that we shouldn't patch it! But unless the nasal demons are going to start a process and make unwanted HTTP connections, I'm not worried.

[ Parent | on HN ]
Re:Severity HIGH security problem to be announced with curl ... by hhh on Thursday October 05, 2023 @08:36AM (#37777797)
Why do you include it if it’s unused?
[ Parent | on HN ]
Re:Severity HIGH security problem to be announced with curl ... by mschuster91 on Thursday October 05, 2023 @02:11PM (#37781962)
A lot of stuff depends on cURL/libcurl. IIRC, php these days has it enabled by default.
[ Parent | on HN ]