Re: [Qemu-devel] [PULL 0/1] vnc: fix memory corruption (CVE-2015-5225)

[Peter Maydell]

On 26 August 2015 at 17:40, Gerd Hoffmann <address@hidden> wrote:
>   Hi,
>
> Here comes a vnc security fix.
>
> please pull,
>   Gerd
>
> The following changes since commit 7df9671989c1cfa693764f9ae6349324b2ada02a:
>
>   Merge remote-tracking branch 
> 'remotes/pmaydell/tags/pull-target-arm-20150825-1' into staging (2015-08-25 
> 16:24:06 +0100)
>
> are available in the git repository at:
>
>
>   git://git.kraxel.org/qemu tags/pull-cve-2015-5225-20150826-1
>
> for you to fetch changes up to eb8934b0418b3b1d125edddc4fc334a54334a49b:
>
>   vnc: fix memory corruption (CVE-2015-5225) (2015-08-26 17:54:33 +0200)

So, are we planning to take the "make a stable release for CVE fixes"
approach we discussed at the QEMU summit for this?

(I'm currently applying it to master.)

thanks
-- PMM