←back to thread

Libxml2's "no security embargoes" policy

(lwn.net)
277 points jwilk | 1 comments | 25 Jun 25 19:36 UTC | HN request time: 0.209s | source
Show context
JonChesterfield ◴[25 Jun 25 22:25 UTC] No.44382335[source]▶
This is an alarming read. Not so much the "security bugs are bugs, go away" sentiment which seems completely legitimate, but that libxml2 and libxslt have been ~ solo dev passion projects. These aren't toys. They're part of the infrastructure computing is built on.
replies(5): >>44384388 #>>44384598 #>>44384778 #>>44385323 #>>44385522 #
1. pabs3 ◴[26 Jun 25 06:41 UTC] No.44384778[source]▶
The Nebraska project in this diagram isn't just one project, its pretty much the entirety of our underlying software infrastructure.

https://xkcd.com/2347/