Skip to main content
3 of 3
Minor fixes. More clear question.
Pablo Bianchi
  • 16.8k
  • 10
  • 5

Should we add ephemeral security alerts on high priority vulnerabilities?

I came across an answer which suggest installing x tool which have a recently found a high priority security risk, so I edit it to add:

Update x ASAP: CVE-2021-nnnnn: High priority security vulnerability.

The user who answered the question revert the edit arguing:

I reverted your edit because security vulnerability info isn't really relevant to the question and somewhat ephemeral. Here's the link to the CVE alert that was removed: ubuntu.com/security/CVE-2021-nnnnn

I replied:

Being ephemeral doesn't make it less important. You could leave the security alert as long as it's relevant. Software with high priority security risks are relevant in this context.

But I wonder what other people think. Should we add this (necessary ephemeral) security alerts on questions or answers in which the main subject is around a software with a high priority vulnerabilities?

Edit: It seems there is a consensus that it should have been a comment. There is any case where should be an edit? What if there isn't a release patch yet?

Pablo Bianchi
  • 16.8k
  • 10
  • 5