Hello, Not sure if you did not include this for a reason in the latest 3.10.y (3.10.38, released 16 hours ago) or if you just missed it. In the latter case, please backport it. Patch from commit b04c46190219a4f845e46a459e3102137b7f6cac should apply with some offsets but otherwise work as expected. We tested with 3.10.37 and did not find any regressions or other unexpected behavior. As for now, 3.10.y LTS would still be vulnerable to CVE-2014-2851. TIA Florian
Attachment:
signature.asc
Description: OpenPGP digital signature