Curl summer of bliss (curl will not process security vulnerabilities in July)

lyricism:

Obviously you shouldn’t disclose some things that might make an attacker’s job easier.

It doesn’t make attacker’s job easier. It makes it impossible when your target isn’t even using the application you’re trying to compromise them with. You know they won’t use it until the attack you found has been patched.

lyricism:

Do you think e.g. announcing to the world you’re going to be away from home and your valuables therein for two weeks is fine

Bad analogy. Does announcing that people using your burglar alarm that’s got a scheduled four week downtime, should empty their apartments of all valuables for the duration, give some edge to the burglars? Sounds like responsible behavior to me. (And this is just an example, the entire mitigation is sudo apt install wget -y, assuming your OS doesn’t bundle it already.)