Am Wed, Sep 09, 2020 at 12:30:44PM +0200 schrieb Aurelien Jarno:
> control: forcemerge 967938 969926
>
> Hi,
>
> On 2020-09-09 02:58, Bernd Zeimetz wrote:
> > Source: glibc
> > Version: 2.28-10
> > Severity: serious
> > Tags: security upstream patch
> > X-Debbugs-Cc: Debian Security Team <t...@security.debian.org>
> >
> > Hi,
> >
> > we are running into the bug
> > https://sourceware.org/bugzilla/show_bug.cgi?id=20338
> > causing systemd-sysusers to segfault.
> >
> > Patch is available in the linked bug report.
>
> This has already been reported, Florian will work on a backport, as it
> is not straightforward to backport it to buster due to the usage of
> private symbols.
Florian, did you manage to backport this to 2.31? It would be nice to get this
fixed for a Buster point release still.
Cheers,
Moritz
