Join Nostr
2026-07-13 12:40:31 UTC

Stewart Russell on Nostr: Maybe I haven't read enough CVEs, but I've never seen one described as "Severity: ...

Maybe I haven't read enough CVEs, but I've never seen one described as "Severity: grave" before:

ckermit: CVE-2025-68920: Malicious remote can overwrite and exfiltrate local files — https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1123025

(this was perfectly innocent behaviour when ckermit was written in the 1980s)