curl / Mailing Lists / curl-library / Single Mail
Buy commercial curl support from WolfSSL. We help you work out your issues, debug your libcurl applications, use the API, port to new platforms, add new features and more. With a team lead by the curl founder himself.

Re: CVE-2020-19909 possibly released without curl's authors ack (yet another NVD Critical)

From: Daniel Stenberg via curl-library <curl-library_at_lists.haxx.se>
Date: Sat, 26 Aug 2023 00:40:17 +0200 (CEST)

On Fri, 25 Aug 2023, Daniel Stenberg via curl-library wrote:

> Unfortunately I think I need to spend some time to write up something about
> this, in blog form and on the curl site.

Step one. A blog post with some details:

https://daniel.haxx.se/blog/2023/08/26/cve-2020-19909-is-everything-that-is-wrong-with-cves/

-- 
  / daniel.haxx.se
  | Commercial curl support up to 24x7 is available!
  | Private help, bug fixes, support, ports, new features
  | https://curl.se/support.html
-- 
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html
Received on 2023-08-26