SecurityLobstersabout 1 hour ago
Curl Becomes Turing-Complete for Nine Months
2 min read
Curl 8.12 through 8.16 allowed config files to slice variable values without a depth cap, simulating any two-counter Minsky program. This made the software Turing-complete for nine months until version 8.17.0 added a five-level include cap. The fix prevents configs from including themselves indefinitely, resolving the issue found in the 29th October 2026 release.
Level
Hype check
Tap to vote and see what everyone thinks.