From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by sourceware.org (Postfix) with ESMTPS id 8B79538582BE for ; Wed, 7 Feb 2024 18:41:49 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 8B79538582BE Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=redhat.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=redhat.com ARC-Filter: OpenARC Filter v1.0.0 sourceware.org 8B79538582BE Authentication-Results: server2.sourceware.org; arc=none smtp.remote-ip=170.10.129.124 ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1707331311; cv=none; b=Ogyx2dBIQLBBjzYnyc1SoS8Qj4aD0WwzkV3DepNjr8eNnmtfHiqJxns5Yj7URE6lcnbgEzBmhl6799f4j/OaS73oki5dyFGBXOQd27bHZeN6qk5c4ZGEv4AP6HrZG9dY2yORxA2ocJIjBAtU705mc9aZiz8qAePLOtlsrehNoX4= ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1707331311; c=relaxed/simple; bh=Es3FlZYJkpSCnHXa0SvH4ZHI8Ju7arZMqeM4HoJmjr0=; h=DKIM-Signature:Message-ID:Date:MIME-Version:To:From:Subject; b=sg8Pb/9LMQyhdmd9rt9fuHA/S5iGGcRD1pJ3c4HNV1Y1sJiOH+U6wNhf6NYXOtudmLQqV85r71Oo0bwGHDcEosvhbf6JaNHKCLEWm1Nixqo7NYGbIMetoYlA7ryNciIQBnCJUd0i1fyghKF4VlvZMU/rTjmjm2KjyfFoNW3Yjr8= ARC-Authentication-Results: i=1; server2.sourceware.org DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1707331309; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=Es3FlZYJkpSCnHXa0SvH4ZHI8Ju7arZMqeM4HoJmjr0=; b=MTJBRC/RkKmejUQyaIsfEpnAcwYUGq18ilF9O85Xn2eUHyJdE5tf3BIU6UzlC5CBgBnawS 7vvIJdijRCq9CBsrXVq2TifDZ61L2w3jNAKRqhbge2hB1ijXZbFs/zRCc0kftSnFUHRcVJ m2X4JEaQA4ZIQcTjIgKxrSrh3R55mZI= Received: from mail-qv1-f69.google.com (mail-qv1-f69.google.com [209.85.219.69]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-175-V5puDnUHMqGORdsmVHoFtw-1; Wed, 07 Feb 2024 13:41:48 -0500 X-MC-Unique: V5puDnUHMqGORdsmVHoFtw-1 Received: by mail-qv1-f69.google.com with SMTP id 6a1803df08f44-6800aa45af1so14478756d6.3 for ; Wed, 07 Feb 2024 10:41:47 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1707331307; x=1707936107; h=content-transfer-encoding:organization:subject:from:to :content-language:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=Es3FlZYJkpSCnHXa0SvH4ZHI8Ju7arZMqeM4HoJmjr0=; b=KFWdOrOVwMXzE9Mn6cq0TKMybtxrKwSipfKpuOYE2ARoSsbs7xs0ocn8khkWHCq+5a EbpKLOFf0Jqroi1JPa6DvR7/y5RMzoZ4Xg2MFn+1jJcbcWDAL1mKJGiTQIrKzmXWD9EP EKUpkwrFcag9Pk5gRQH4vv58H0owbH1MbRLZAVCTD3Z5YoFIWzQv4uJ/HGhqcZ9/+hpt UZ9hnVG19BB+fRg+jdxDT9SVhIIk/i0bXyyMQf+cJNI/FkddV9thx8UvrDBxjjXFwM/L E2bCzZjJt3um5jnjSFkDRpImup9YaGwbmKqb//+kUbVfEvHM7OXH/NM2Frw0Zm2pdiS5 ffVQ== X-Gm-Message-State: AOJu0Yyzu4a3xLhKCknQxPyDrzvPEdqOr6tclne62nwinMw6dwzqlday gSLVHQjAgIh05pgTedrum883D9KdFXqROhD6rE2EWSg0f5ZZwbwllZ7PliUMYaM7sVnEuegFtjA PlhLbONsgNrjyGJcclaXLIUMmAbB6XLwaeOy+M/Lj9DV2d0K3onk3EUR5Wl0emLeritK04wO0zS K5pLbQPv4T57ToMj2hkmYZDgs1t2ZUyMPZjWqmt8Wta6w= X-Received: by 2002:a05:6214:301e:b0:68c:8a1c:53fa with SMTP id ke30-20020a056214301e00b0068c8a1c53famr7798937qvb.46.1707331307278; Wed, 07 Feb 2024 10:41:47 -0800 (PST) X-Google-Smtp-Source: AGHT+IFYIwMswhh/g+s0Kjy7rXCjkicNRIN4TWfSfXOQ/n+KAXNJy6RYBnVJjXD92+PhewJ2VCRvzA== X-Received: by 2002:a05:6214:301e:b0:68c:8a1c:53fa with SMTP id ke30-20020a056214301e00b0068c8a1c53famr7798917qvb.46.1707331306894; Wed, 07 Feb 2024 10:41:46 -0800 (PST) Received: from [192.168.0.241] ([198.48.244.52]) by smtp.gmail.com with ESMTPSA id qj22-20020a056214321600b0068ca88dc9d2sm819601qvb.104.2024.02.07.10.41.46 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 07 Feb 2024 10:41:46 -0800 (PST) Message-ID: Date: Wed, 7 Feb 2024 13:41:45 -0500 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird To: libc-announce@sourceware.org From: Carlos O'Donell Subject: The GNU C Library has been authorized by the CVE Program as a CVE Numbering Authority (CNA) Organization: Red Hat X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Language: en-US Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=-5.8 required=5.0 tests=BAYES_00,DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,KAM_SHORT,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,RCVD_IN_SORBS_WEB,SPF_HELO_NONE,SPF_NONE,TXREP,T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: The GNU C Library (glibc) is a key part of the trusted foundation in a secure and high-quality software supply chain and is used by the GNU Toolchain, the GNU system, and many of the GNU/Linux systems today. In an ongoing effort to improve security, the project has been authorized by the CVE Program as a CVE Numbering Authority (CNA): https://www.cve.org/Media/News/item/news/2024/02/06/GNU-C-Library-Added-as-CNA As a CNA the glibc security team will be working to improve the quality and response time of security advisories and mitigations. Over the coming months, the glibc security team will define the process for the CNA and establish best practices that can also be used by the rest of the GNU Toolchain. To receive notifications of new advisories please subscribe to the glibc announcement mailing list (libc-announce): https://sourceware.org/mailman/listinfo/libc-announce Advisories are published directly into the glibc git repository: https://sourceware.org/git/?p=glibc.git;a=tree;f=advisories;hb=HEAD For more information please see the project security documentation: https://sourceware.org/glibc/security.html