Skip to main content

Search

Items tagged with: noai


#curl 8.11.1 has been released. It includes a fix to #CVE_2024_11053 - a #vulnerability I discovered.

It is a logic flaw in the way curl parses .netrc file. In certain situations, the configured password can be sent to a incorrect host. Luckily the affected configurations should be quite rare and thus the situation is unlikely to occur often.

The issue has existed in the curl source code for almost twenty-five years.

β€’ https://curl.se/docs/CVE-2024-11053.html
β€’ https://hackerone.com/reports/2829063

No AI tools were used in discovering or reporting the vulnerability.

#noai #handcrafted #infosec #cybersecurity


@Karlitschek it means more of this , and it means AI steals more open source code to resell crap emission services. It also steals your own code, nextcloud! #noai in open source.

https://fosstodon.org/@atoponce/112796170421418841

⇧