Hello,

On Wed, Apr 14, 2021 at 12:32 AM Sebastian Andrzej Siewior
<sebast...@breakpoint.cc> wrote:
> Usually yes, I let it slide (unfortunatelly) and was checking best
> options moving forward. After all I need reasons to present to the
> release team.

I just noticed that the only CVE that affects buster is CVE-2021-1405.
The other two affects only 0.103.0 and 0.103.1 and the patch for
CVE-2021-1405 could be easily backported to buster. Maybe we could
instead do that now? And later when there's a need, we can backport
the entire new version? What do you think?


- u

Reply via email to