On 31/05/2019 04:02, Konrad Rzeszutek Wilk wrote: > On 5/30/19 8:16 AM, Ben Hutchings wrote: >> I'm looking at CVE-2015-8553 which is fixed by: >> >> commit 7681f31ec9cdacab4fd10570be924f2cef6669ba >> Author: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx> >> Date: Wed Feb 13 18:21:31 2019 -0500 >> >> xen/pciback: Don't disable PCI_COMMAND on PCI device reset. >> >> I'm aware that this change is incompatible with qemu < 2.5, but that's >> now quite old. Do you think it makes sense to apply this change to >> some stable branches? >> >> Ben. >> > > Hey Ben, > > <shrugs> My opinion is to drop it, but if Juergen thinks it makes sense > to backport I am not going to argue. > I'm with Konrad here. Juergen
