[lxc-devel] new tag on stable-3.0 to mark CVE-2019-5736 as resolved?

Harald Dunkel harald.dunkel at aixigo.de
Thu Feb 28 06:58:44 UTC 2019


Hi folks,

AFAICS stable-2.0 has got a new tag 2.0.11, including a fix
for CVE-2019-5736. There is no new tag on stable-3.0, even
though the fix appears to be in, too.

Wouldn't it be reasonable to introduce new tags, esp. if a
CVE has been fixed on a LTS branch? Is there something
missing on stable-3.0 that should be fixed first?


Regards
Harri


More information about the lxc-devel mailing list