Ah ok From https://github.com/tianocore/tianocore.github.io/wiki/Reporting-Security-Issues you will see that issues are only visible to the report and infosec group of Bugzilla, namely “Issues in the Tianocore Security Issue product are only visible to the Reporter of the issue and the members of the infosec group. ”
Since you were not the reporter of 686 and are not part of infosec, you cannot see it. If you or anyone in the community would like to help work these issues while in triage and embargo, let me know and we can add you to the infosec group. Vincent From: Rafael Machado [mailto:rafaelrodrigues.mach...@gmail.com] Sent: Monday, October 15, 2018 12:17 PM To: Zimmer, Vincent <vincent.zim...@intel.com> Cc: edk2-devel@lists.01.org Subject: Re: [edk2] Where to find the fix for security issue id 686 Hi Vincent Thanks for the answer. The problem is that when I try to access this link I have this message: "You are not authorized to access bug #686." Any idea? Em seg, 15 de out de 2018 às 14:28, Zimmer, Vincent <vincent.zim...@intel.com<mailto:vincent.zim...@intel.com>> escreveu: You can find reference to patches via the advisory entry "31. EDK II TIANOCOMPRESS BOUNDS CHECKING ISSUES" advisory entry https://edk2-docs.gitbooks.io/security-advisory/content/edk-ii-tianocompress-bounds-checking-issues.html has an embedded link to https://bugzilla.tianocore.org/attachment.cgi?id=150 Vincent -----Original Message----- From: edk2-devel [mailto:edk2-devel-boun...@lists.01.org<mailto:edk2-devel-boun...@lists.01.org>] On Behalf Of Rafael Machado Sent: Monday, October 15, 2018 5:39 AM To: edk2-devel@lists.01.org<mailto:edk2-devel@lists.01.org> Subject: [edk2] Where to find the fix for security issue id 686 Hi everyone I was tying to find the patch to fix the reported security issue id 686 ( https://bugzilla.tianocore.org/show_bug.cgi?id=686), but was not able to access it. Could someone please tell if this patch, or series of patches, was already merged to some branch that is public available? Thanks and Regards Rafael R. Machado _______________________________________________ edk2-devel mailing list edk2-devel@lists.01.org<mailto:edk2-devel@lists.01.org> https://lists.01.org/mailman/listinfo/edk2-devel _______________________________________________ edk2-devel mailing list edk2-devel@lists.01.org https://lists.01.org/mailman/listinfo/edk2-devel
