A bit further upthread an Exim dev has a different account: "The ZDI contacted us in June 2022. We asked about details but didn't get answers we were able to w

A bit further upthread an Exim dev has a different account: "The ZDI contacted us in June 2022. We asked about details but didn't get answers we were able to work with. [..] Next contact with ZDI was in May 2023. [..] The remaining issues are debatable or miss information we need to fix them." I have no experience with anyone involved and don't really know anything more than this; just pointing out there are differing accounts here.