Re: Questionable CVE's reported against dnsmasq

[Sebastian Pipping <sebastian () pipping org>]

Hello Stuart,


On 10/27/25 20:45, Stuart Henderson wrote:
> On 2025/10/27 19:51, Sebastian Pipping wrote:
> > Also, fixes without a CVE will not be backported downstream.
>
> That depends on the downstream.

I'm happy to learn which downstreams backport security issues
without a CVE, in practice. Do you have an example or two?

Thanks and best



Sebastian