Skip to main content
Participant
Oct 29, 2026 1:08 AM UTC
Question

Currently, the dng_sdk resolves multiple vulnerabilities (e.g., CVE-2026-27280) by upgrading to a newer version. Is there any plan to backport the corresponding fixes directly to lower versions (e.g., 1.4.0) instead? If so, what is that plan?

1、I am currently using a very old version of dng_sdk, 1.4.0, and I do not want to upgrade to 1.7.1.
2、Many of the current dng_sdk vulnerabilities have been fixed by upgrading to newer versions, with no fixes provided for the lower versions.
3、I would like to know: is there any plan to backport the vulnerability fixes to the lower versions? If so, what is the rough plan?