3 ms·
https://github.com/Speykious/cve-rs https://github.com/Speykious/cve-rs They can be fixed, but as always, there’s a lot of work to do. The bug that the above p
by steveklabnik 2y ago
https://github.com/Speykious/cve-rs https://github.com/Speykious/cve-rs
They can be fixed, but as always, there’s a lot of work to do. The bug that the above package relies on has never been seen in the wild, only from handcrafted code to invoke it, and so is less of a priority than other things.
And some fixes are harder than others. If a fix is going to be a lot of work, but is very obscure, it’s likely to exist for a long time.
- josephg 2y agoYes, true. But as others have said, there’s probably still some value in making authors of malicious code jump through hoops, even if it will take some time to fix all these bugs. And the bugs should simply get fixed.