[systemd-devel] journald cves on 239

[Mike Gilbert]

On Thu, Jan 24, 2019 at 9:34 AM Umut Tezduyar Lindskog
<umut at tezduyar.com> wrote:
>
> Hello,
>
> We are on systemd 239 and we would like to patch following CVEs
> without jumping to 240.
>
> CVE-2018-16864
> CVE-2018-16865
> CVE-2018-16866
>
> Can someone please help us out and point the commits that we need to
> back-port since 239 was tagged?

Have a look at the v239-stable branch here. You want the commits
starting with 88947d7cae785c9aefe2083feb22b4ad93060e9e.

https://github.com/systemd/systemd-stable/commits/v239-stable