[systemd-devel] journald cves on 239

[Reindl Harald]

Am 24.01.19 um 15:34 schrieb Umut Tezduyar Lindskog:
> Hello,
> 
> We are on systemd 239 and we would like to patch following CVEs
> without jumping to 240.
> 
> CVE-2018-16864
> CVE-2018-16865
> CVE-2018-16866
> 
> Can someone please help us out and point the commits that we need to
> back-port since 239 was tagged?

well, and that's why every other project has point releases where
downstream just downloads the tarball, put it in rpmbuild/SOURCES and
fire up the build process