On Thu, 4 Apr 2019 at 07:56, Ovidiu Panait <[email protected]> wrote: > > Have all of these been resolved in master? > > > > Ross > > No, these have not been resolved in master. Ghostscript version on > master is 9.26 and the fixes come from 9.27, which hasn't been released yet. > > I only sent them for thud since I remember that on master is preferred > to upgrade to a newer version when it's available instead of backporting > fixes.
Policy is that security issues are fixed in master then the release branches, so that we don't regress. If this is merged then the next release will be vulnerable because it is frozen for upgrades right now... Ross -- _______________________________________________ Openembedded-core mailing list [email protected] http://lists.openembedded.org/mailman/listinfo/openembedded-core
