Re: Time allocation per CVE

2019-03-13 Thread Raphael Hertzog
Hi, On Mon, 11 Mar 2019, Sylvain Beucler wrote: > I spent the day reproducing (unbreaking) the sqlalchemy exploit, > figuring out how to run the test suite, attempting a backport of the > upstream fix, plus some communication. > > I did about the same for the gnutls/nettle issue last week (only

Time allocation per CVE

2019-03-11 Thread Sylvain Beucler
Hi, I spent the day reproducing (unbreaking) the sqlalchemy exploit, figuring out how to run the test suite, attempting a backport of the upstream fix, plus some communication. I did about the same for the gnutls/nettle issue last week (only to conclude with a no-dsa T_T). While I believe those