Hi Simon,
On 17.10.26 03:54, Simon Quigley wrote:
Feedback is welcome. If nothing showstopping comes up, I'll upload
this and issue the DLA on Monday evening (October 19th, 2026).
the package looks good.
Though I wonder why you didn't backport all tests (e.g. CVE-2026-59850,
CVE-2026-59848).?
When there are two commits to fix a CVE (CVE-2026-59847) I would not
combine them in one patch. But that is just a matter of taste.
An explanation why the patch for CVE-2026-59846 is more extensive than
the original commit might answer questions in advance.
Thorsten
