You know it's a good day when you turn a "this random #NIH build system bundles several libraries" bug that's ignored for years into "all the bundled libraries in #premake are vulnerable" bug.
https://bugs.gentoo.org/773475
And yes, upstream knows about #cURL at least, and doesn't do anything about it:
https://github.com/premake/premake-core/issues/2156
Again, why are people using this crap!?
#Gentoo #Security
Michał Górny (he/they) ∞🙀🚂🐧 /
npub1r9…t4ppx
2024-05-25 08:23:09
Author Public Key
npub1r9jmk6t0ape7t9ddfv5nrrsh87pluzxtepzjqu93sctkkurun0wqft4ppxSeen on
wss://relay.nostr.bandPublished at
2024-05-25 08:23:09Event JSON
{
"id": "6660bb7e7becf31849c2a23d9128a86da1bcee3d09fafe4abb853e5381d84208",
"pubkey": "1965bb696fe873e595ad4b29318e173f83fe08cbc8452070b186176b707c9bdc",
"created_at": 1716625389,
"kind": 1,
"tags": [
[
"t",
"nih"
],
[
"t",
"premake"
],
[
"t",
"curl"
],
[
"t",
"gentoo"
],
[
"t",
"security"
],
[
"proxy",
"https://social.treehouse.systems/users/mgorny/statuses/112500761528582416",
"activitypub"
]
],
"content": "You know it's a good day when you turn a \"this random #NIH build system bundles several libraries\" bug that's ignored for years into \"all the bundled libraries in #premake are vulnerable\" bug.\n\nhttps://bugs.gentoo.org/773475\n\nAnd yes, upstream knows about #cURL at least, and doesn't do anything about it:\n\nhttps://github.com/premake/premake-core/issues/2156\n\nAgain, why are people using this crap!?\n\n#Gentoo #Security",
"sig": "f943dd8592ae8f0d970ac4ce48b49ca3ecd4cee255dac247a2b8395dfba6d37ac5a4fbd561f681efd16923652461692b789f1c95ea444177ed7fbee090e26c59"
}