Hi Timo, and sorry for the delay,
On 19/08/2026 09:52, Timo Röhling wrote:
Hi,
I have fixed CVE-2026-5917 for trixie and forky, and this is the patch
for bookworm. I opted to backport the newer git_str_puts_escaped()
function so I could use the actual one-line fix instead of
reimplementing (and possibly breaking) it.
Thanks for this. I see there are 5 other CVEs that were fixed in the same trixie
DSA as this one. Is there a particular reason why those weren't backported as
well (e.g. they are classified as minor issues, or they are too intrusive) or
was it just lack of time?
Cheers,
Emilio
