On 10/23/2017 10:44 AM, Li Zhou wrote: > Porting patch from <https://github.com/curl/curl/commit/ > 5ff2c5ff25750aba1a8f64fbcad8e5b891512584> to solve CVE-2017-1000254. It's better to update to latest version (7.56) instead of backporting patches, please do that. Alex