pkgsrc-WIP-changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: gdb: Add TODO referencing CVE



Hello Jason,

Jason Bacon writes:
> [...]
> Log Message:
> gdb: Add TODO referencing CVE
> [...]
> +
> +https://sourceware.org/bugzilla/show_bug.cgi?id=21600

Isn't it CVE-2017-9778? (if that's the case we have a pkg-vulnerabilities
entry about it and this TODO file can be removed)

Usually we maintain a list of possible vulnerabilities in wip/*/TODO
file in order to integrate them in pkg-vulnerabilities when wip
packages are imported and to make users aware of them.
But for packages already in pkgsrc (non-wip) entries should be in
pkg-vulnerabilities.


Thank you!


Home | Main Index | Thread Index | Old Index