public inbox for libc-alpha@sourceware.org
 help / color / mirror / Atom feed
* [PATCH] Record CVE-2018-6485 in ChangeLog and NEWS [BZ #22343]
@ 2018-02-01 14:25 Florian Weimer
  2018-02-01 16:02 ` Dmitry V. Levin
  0 siblings, 1 reply; 2+ messages in thread
From: Florian Weimer @ 2018-02-01 14:25 UTC (permalink / raw)
  To: GNU C Library, Dmitry V. Levin

I got another CVE assignment from MITRE for the posix_memalign issue. 
Can we still install it?

Arjun is looking into the malloc fix; we have some disagreement there to 
what extent it is a separate issue.  I do not observe it with our 
2.17-based build on i386.  If the affected version range is different 
from the posix_memalign issue, technically, we should assign a separate 
CVE ID (but it doesn't make sense to stop the release for that).

Thanks,
Florian

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: [PATCH] Record CVE-2018-6485 in ChangeLog and NEWS [BZ #22343]
  2018-02-01 14:25 [PATCH] Record CVE-2018-6485 in ChangeLog and NEWS [BZ #22343] Florian Weimer
@ 2018-02-01 16:02 ` Dmitry V. Levin
  0 siblings, 0 replies; 2+ messages in thread
From: Dmitry V. Levin @ 2018-02-01 16:02 UTC (permalink / raw)
  To: libc-alpha

[-- Attachment #1: Type: text/plain, Size: 254 bytes --]

On Thu, Feb 01, 2018 at 03:24:51PM +0100, Florian Weimer wrote:
> I got another CVE assignment from MITRE for the posix_memalign issue. 
> Can we still install it?

You mean, record the CVE in ChangeLog and NEWS?  Yes, please install.


-- 
ldv

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 801 bytes --]

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2018-02-01 16:02 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2018-02-01 14:25 [PATCH] Record CVE-2018-6485 in ChangeLog and NEWS [BZ #22343] Florian Weimer
2018-02-01 16:02 ` Dmitry V. Levin

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).