this post was submitted on 26 Aug 2023
83 points (100.0% liked)

Free and Open Source Software

17931 readers
117 users here now

If it's free and open source and it's also software, it can be discussed here. Subcommunity of Technology.

This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago
MODERATORS
Gaywallet@beehaw.org
alyaza@beehaw.org
83
CVE-2020-19909 is everything that is wrong with CVEs (wetdry.world)
submitted 1 year ago* (last edited 1 year ago) by rinaderp@wetdry.world to c/foss@beehaw.org
9 comments fedilink hide all child comments
 

CVE-2020-19909 is everything that is wrong with CVEs

https://daniel.haxx.se/blog/2023/08/26/cve-2020-19909-is-everything-that-is-wrong-with-cves/

@foss

you are viewing a single comment's thread
view the rest of the comments
[–] vojel@feddit.de 7 points 1 year ago

You got a point with NVD but this case shows how one could damage the reputation of a product - this really looks like Bagder didnt care about security, even the 2020 prefix is a bad sign looking from the outside. I am not sure how the NVD define CVE scores but as bagder openly explains this isnt a flaw in security, just a bug he already fixed years ago.