Skip to main content
1 of 3
Pablo Bianchi
  • 16.8k
  • 10
  • 5

Should we add ephemeral security alerts on high priority vulnerabilities?

I get across an answer in which suggest installing x tool which have a recently found high priority security risk, so I edit it to add:

Update x ASAP: CVE-2021-nnnnn: High priority security vulnerability.

The user who answered the question revert the edit arguing:

I reverted your edit because security vulnerability info isn't really relevant to the question and somewhat ephemeral. Here's the link to the CVE alert that was removed: ubuntu.com/security/CVE-2021-nnnnn

I believe that:

Being ephemeral doesn't make it less important. You could leave the security alert as long as it's relevant. Software with high priority security risks are relevant in this context.

But I wonder what other people think. Should we add this (necessary ephemeral) security alerts on questions or answers in which the main subject is around a software with a high priority vulnerabilities?

Pablo Bianchi
  • 16.8k
  • 10
  • 5