Michał Górny (he/they) ∞🙀🚂🐧 on Nostr: You know it's a good day when you turn a "this random #NIH build system bundles ...

You know it's a good day when you turn a "this random #NIH build system bundles several libraries" bug that's ignored for years into "all the bundled libraries in #premake are vulnerable" bug.

https://bugs.gentoo.org/773475

And yes, upstream knows about #cURL at least, and doesn't do anything about it:

https://github.com/premake/premake-core/issues/2156

Again, why are people using this crap!?

#Gentoo #Security