This is the mail archive of the
libc-alpha@sourceware.org
mailing list for the glibc project.
Re: glibc 2.27: 3 weeks till release
- From: Carlos O'Donell <carlos at redhat dot com>
- To: libc-alpha at sourceware dot org, Florian Weimer <fweimer at redhat dot com>, "Dmitry V. Levin" <ldv at altlinux dot org>
- Date: Thu, 11 Jan 2018 20:19:19 -0800
- Subject: Re: glibc 2.27: 3 weeks till release
- Authentication-results: sourceware.org; auth=none
- References: <20180111034441.GB6991@altlinux.org>
On 01/10/2018 07:44 PM, Dmitry V. Levin wrote:
> + libidn2-based IDNA implementation [3]
>
> This qualifies as security bug fixes.
It is my opinion that this change should be deferred until the 2.28
branch opens after the release.
While I agree that moving IDNA to libidn2 solves a *lot* of problems
it may also introduce subtle differences that might cause application
regressions and we will want time to fix those.
I suggest that we, Fedora, as a downstream, adopt this patch ourselves
and begin testing it immediately in Fedora Rawhide. If everything
goes well we should check it into 2.28 when it opens or shortly after,
and that will give us the broadest testing window.
--
Cheers,
Carlos.