<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">I made a mistake on CVE-2020-36317 and CVE-2020-36318 patches. The names of the patches are incorrect (I put 2021 instead of 2020)<br><br><div dir="ltr">Yao Wei<div><br></div><div>(This email is sent from a phone; s<span style="background-color: rgba(255, 255, 255, 0);">orry for HTML email if it happens.</span><span style="font-size: 13pt;">)</span></div></div><div dir="ltr"><br><blockquote type="cite">On Apr 25, 2021, at 08:57, Yao Wei <mwei@debian.org> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><span>tag -1 patch</span><br><span>thanks</span><br><span></span><br><span>Attached is the proposed patch onto debian repo for this bug. Note</span><br><span>that because the patch order is important (one patch depends on another).</span><br><span></span><br><span>Some tests on the original PRs did not apply because there were no such</span><br><span>files in 1.48</span><br><span></span><br><span>Please review before apply since I don't know whether any of these CVEs</span><br><span>are introduced by changes not in 1.48.</span><br><span></span><br><span>Thanks,</span><br><span>Yao Wei</span><br><div><0001-CVE-fixups-Closes-986803.patch></div></div></blockquote></body></html>