Subj : Stenberg: DISPUTED, not REJECTED
To   : All
From : LWN.net
Date : Fri Feb 23 2024 14:45:06

Stenberg: DISPUTED, not REJECTED

Date:
Fri, 23 Feb 2024 14:42:30 +0000

Description:
The Curl project has previously had problems with
CVEs issued for things that are not security issues. On February 21,
Daniel Stenberg wrote about the Curl project's most recent issue with the CVE 
system, saying: I keep insisting that the CVE system is broken and that the 
database of
existing CVEs hosted by MITRE (and imported into lots of other
databases) is full of questionable content and plenty of downright
lies. A primary explanation for us being in this ugly situation is that
it is simply next to impossible to get rid of invalid CVEs.

======================================================================
Link to news story:
https://lwn.net/Articles/963240/


--- Mystic BBS v1.12 A47 (Linux/64)
 * Origin: tqwNet UK HUB @ hub.uk.erb.pw (1337:1/100)

.