When a tiny, widely used HTTP client slips into an insecure default mode, the consequences ripple far beyond a single library — they reach package managers, CI pipelines, internal tooling, and any application that quietly trusts “https://” without actually verifying who’s on the other end...
A pervasive TLS certificate‑verification lapse in Perl’s CPAN.pm (tracked as CVE‑2023‑31484) left versions earlier than 2.35 trusting HTTPS downloads without validating server certificates — a simple oversight with serious supply‑chain consequences that was fixed by enabling explicit SSL...
FFmpeg 8.0 "Huffman" lands as a sweeping, technically ambitious release that folds AI transcription, broad Vulkan compute support, dozens of native decoders, and notable hardware-acceleration improvements into the project’s core — a release the developers call one of their largest to date and...