From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 35573 invoked by alias); 4 Feb 2019 14:36:23 -0000 Mailing-List: contact libc-stable-help@sourceware.org; run by ezmlm Precedence: bulk List-Post: List-Help: List-Subscribe: List-Archive: Sender: libc-stable-owner@sourceware.org Received: (qmail 35507 invoked by uid 89); 4 Feb 2019 14:36:22 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Checked: by ClamAV 0.100.2 on sourceware.org X-Virus-Found: No X-Spam-SWARE-Status: No, score=-0.4 required=5.0 tests=BAYES_00,KAM_LAZY_DOMAIN_SECURITY,KAM_NUMSUBJECT autolearn=no version=3.3.2 spammy=H*r:4.89, UD:aurel32.net X-Spam-Status: No, score=-0.4 required=5.0 tests=BAYES_00,KAM_LAZY_DOMAIN_SECURITY,KAM_NUMSUBJECT autolearn=no version=3.3.2 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on sourceware.org X-Spam-Level: X-HELO: hall.aurel32.net Received: from hall.aurel32.net (HELO hall.aurel32.net) (163.172.24.10) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Mon, 04 Feb 2019 14:36:20 +0000 Received: from [2a01:e35:2e4c:a861:655e:aef3:f589:b897] (helo=ohm.rr44.fr) by hall.aurel32.net with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from ) id 1gqfMA-0006dq-TV; Mon, 04 Feb 2019 15:36:18 +0100 Received: from aurel32 by ohm.rr44.fr with local (Exim 4.92-RC4) (envelope-from ) id 1gqfMA-0003yD-9R; Mon, 04 Feb 2019 15:36:18 +0100 Date: Tue, 01 Jan 2019 00:00:00 -0000 From: Aurelien Jarno To: Florian Weimer Cc: libc-stable@sourceware.org Subject: Re: Backporting CVE-2016-10739 Message-ID: <20190204143618.GA13499@aurel32.net> References: <20190204134254.GA13816@aurel32.net> <87o97rpsgq.fsf@oldenburg2.str.redhat.com> <20190204140827.GC15137@aurel32.net> <87bm3rpr6r.fsf@oldenburg2.str.redhat.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <87bm3rpr6r.fsf@oldenburg2.str.redhat.com> User-Agent: Mutt/1.10.1 (2018-07-13) X-IsSubscribed: yes X-SW-Source: 2019-02/txt/msg00006.txt.bz2 On 2019-02-04 15:24, Florian Weimer wrote: > * Aurelien Jarno: > > > On 2019-02-04 14:56, Florian Weimer wrote: > >> * Aurelien Jarno: > >> > >> > I am looking at backporting fixes for CVE-2016-10739 (ie commit > >> > 108bc404) in the 2.28 branch first, and probably in the 2.24 branch > >> > later. I would need some guidance how to proceed: > >> > >> I planned to do it last week, but didn't finish it. > > > > [...] > > > >> If you want to do it, I can help you with that. > > > > If you are already working on it, I'll just wait, there is no need to > > duplicate the work. > > Let me handle the backport the glibc 2.28, and you can take it from > there? Works for me. Thanks. -- Aurelien Jarno GPG: 4096R/1DDD8C9B aurelien@aurel32.net http://www.aurel32.net