Now that MITRE has responded with a CVE assignment, the proposed patches (from comments #5, #19, #20, and #21) have been privately supplied to downstream stakeholders along with a copy of the impact description (from comment #17). We are still within our downstream notification window to be able to proceed with coordinated disclosure at 15:00 UTC on 2021-08-31.
Now that MITRE has responded with a CVE assignment, the proposed patches (from comments #5, #19, #20, and #21) have been privately supplied to downstream stakeholders along with a copy of the impact description (from comment #17). We are still within our downstream notification window to be able to proceed with coordinated disclosure at 15:00 UTC on 2021-08-31.