On Thu, Jul 20, 2017 at 05:54:06PM +0200, Ludovic Courtès wrote: > Leo Famulari skribis: > > > This is a place to discuss the "stack crash" bugs as they apply to our > > packages. > > > > https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000366 > > https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt > > I think we can close this bug now, can’t we? Yeah, I'm closing it. I think the various mitigations we applied will change and improve over time, but they can be discussed elsewhere once we know what they are.