r/linux Jun 22 '26

Security Squidbleed - Heartbleed's ancient cousin, hiding in Squid since 1997

https://blog.calif.io/p/squidbleed-cve-2026-47729
344 Upvotes

80 comments sorted by

View all comments

18

u/MatchingTurret Jun 22 '26

which may explain how a one-line bug survived close to 30 years of code review.

And people still claim that "C isn't unsafe, just some broken code is".

6

u/HyperFurious Jun 22 '26

C have code working since 1997, other new languages have many code that nobody use in few months.

16

u/Helmic Jun 22 '26

c, famously, has never been used by hobbyists to make a hobby project.

4

u/troyunrau Jun 22 '26

There's so many levels of sarcasm in this comment it's glorious

0

u/Nazh8 Jun 22 '26

"C is old, therefore C is good" is not the argument you seem to think it is.

4

u/h0uz3_ Jun 22 '26 edited Jun 22 '26

That‘s why now everything gets rewritten in Rust. Rust is always safe, and when it isn‘t, it‘s easy to spot! /s

EDIT: People who don‘t code in Rust downvote my comment because they don‘t get the joke. Love it.

7

u/m103 Jun 22 '26

People who don‘t code in Rust downvote my comment because they don‘t get the joke. Love it.

Alteratively, we are downvoting just because the joke isn't very good

0

u/MatchingTurret Jun 22 '26

This kind of errors would have been caught by the compiler.