I found this among Sourcemage's (a Linux distro) curl files:

         http://codex.sourcemage.org/stable/ftp/curl/SECURITY

I lack words to describe my feelings.

Not only did iDEFENCE blatantly lie in their security alerts. Others seem to
simply believe their lies as a proof of our inability to do right, without
even bothering to ask us.

I think we deserve better.

-- 
      Daniel Stenberg -- http://curl.haxx.se -- http://daniel.haxx.se
       Dedicated custom curl help for hire: http://haxx.se/curl.html