On Thu, 2026-10-22 at 09:19 +0100, Tom Hughes via devel wrote: > On 22/10/2026 09:13, Marius Schwarz wrote: > > > My points: > > > > a) it should not need karma, as it's an emergency patch for a critical > > vulnerablility. so critical that security firms reaserching it shut down > > their websites!!! (i.e. wordfence did) > > > > I also had the opportunity to see the exploit at work. It's really > > trivial and a wonder that it was under the hood for 22 years. > > > > b) it does not matter at all, if one component i.e. php-fpm out of 4 > > use-cases -> "cgi,cli,fpm,mod_php" is safe, the rest is not. > > > > Can now one pls push this to stable? > It is already queued for stable so will be included in the next push > but IIRC those only happen once a day and there's no such thing as an > emergency push.
There is. Release engineering can do pushes manually when desired. It just requires some co-ordination in order not to collide with any *other* pushes or the regularly-scheduled pushes. -- Adam Williamson (he/him/his) Fedora QA Fedora Chat: @adamwill:fedora.im | Mastodon: @[email protected] https://www.happyassassin.net -- _______________________________________________ devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
