On Mon, 2019-06-03 at 10:00 +0200, Greg KH wrote: > On Thu, May 30, 2019 at 07:02:34PM -0700, Konrad Rzeszutek Wilk wrote: > > On 5/30/19 8:16 AM, Ben Hutchings wrote: > > > I'm looking at CVE-2015-8553 which is fixed by: > > > > > > commit 7681f31ec9cdacab4fd10570be924f2cef6669ba > > > Author: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx> > > > Date: Wed Feb 13 18:21:31 2019 -0500 > > > > > > xen/pciback: Don't disable PCI_COMMAND on PCI device reset. > > > > > > I'm aware that this change is incompatible with qemu < 2.5, but that's > > > now quite old. Do you think it makes sense to apply this change to > > > some stable branches? > > > > > > Ben. > > > > > > > Hey Ben, > > > > <shrugs> My opinion is to drop it, but if Juergen thinks it makes sense to > > backport I am not going to argue. > > Ok, I've queued this up now, thanks. Juergen said: > I'm with Konrad here. so unless I'm very confused this should *not* be applied to stable branches. Ben. -- Ben Hutchings, Software Developer Codethink Ltd https://www.codethink.co.uk/ Dale House, 35 Dale Street Manchester, M1 2HF, United Kingdom