Got it, thanks Anuj! Thanks, Mingli ________________________________________ From: openembedded-core-boun...@lists.openembedded.org [openembedded-core-boun...@lists.openembedded.org] on behalf of Mittal, Anuj [anuj.mit...@intel.com] Sent: Wednesday, March 04, 2020 7:49 AM To: openembedded-core@lists.openembedded.org Subject: Re: [OE-core] bash: Fix CVE-2019-18276
On Tue, 2020-03-03 at 03:11 +0000, Yu, Mingli wrote: > Hi Anuj, > > I agree the Backport status is not accurate as the patch doesn't go > to master branch, but why do you say the patch is irrelevant to the > CVE-2019-18276, could you help to provide more info? I didn't say that the patch was irrelevant to the CVE. I had said that not all the changes were relevant. I believe the glob changes in the patch were irrelevant. Those changes also introduced a failure in bash ptests. Thanks, Anuj -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core