Hi Hugo, On Sun, Apr 15, 2018 at 03:57:50PM -0400, Hugo Lefeuvre wrote: > Hi, > > I have successfully reproduced this issue in latest upstream master > branch and Buster but couldn't reproduce it neither in Wheezy nor in > Jessie or Stretch. > > I am going to take a closer look, try to prepare a patch and declare > Wheezy, Jessie and Stretch unaffected if appropriate.
Please do it only mark as not-affected if you can confirm the vulneable source/issue is not there/why the issue is introduced later, but not only based on reproducibility. Just wanted to state that, although I think given you want to have a closer look, that implies already. Thanks for your work, Salvatore