Hi all.

In the curl security-team we agree that the only sensible way out of a very troublesome security situation is to completely remove support for metalink from curl already in the next release.

See details here:

  https://github.com/curl/curl/pull/7176

--

 / daniel.haxx.se
 | Commercial curl support up to 24x7 is available!
 | Private help, bug fixes, support, ports, new features
 | https://www.wolfssl.com/contact/
-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html

Reply via email to