Control: tags -1 + confirmed On Tue, 2025-12-16 at 09:26 +0300, Michael Tokarev wrote: > There are 2 new upstream stable/bugfix releases in the > 7.2.x LTS branch. The number of fixes this time is > relatively small, and many of them are to the testsuite, > in an attempt to keep tests running. > > Among other things, this fixes two security issues: > #1119917, CVE-2025-12464 (buffer overflow in e1000_receive_iov) > #1117153, CVE-2025-11234 (UAF in websocket handshake code)
(Apparently only actually one, based on the later discussion.) Please go ahead. Regards, Adam
