On Fri, 25 Aug 2023, Daniel Stenberg via curl-library wrote:
Unfortunately I think I need to spend some time to write up something about this, in blog form and on the curl site.
Step one. A blog post with some details: https://daniel.haxx.se/blog/2023/08/26/cve-2020-19909-is-everything-that-is-wrong-with-cves/ -- / daniel.haxx.se | Commercial curl support up to 24x7 is available! | Private help, bug fixes, support, ports, new features | https://curl.se/support.html -- Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library Etiquette: https://curl.se/mail/etiquette.html