Rafael: https://bugzilla.tianocore.org/show_bug.cgi?id=686 public now. You can view it. I also send the patches to fix it. Please check.
Thanks Liming >-----Original Message----- >From: edk2-devel [mailto:edk2-devel-boun...@lists.01.org] On Behalf Of >Rafael Machado >Sent: Tuesday, October 16, 2018 8:41 AM >To: Zimmer, Vincent <vincent.zim...@intel.com> >Cc: edk2-devel@lists.01.org >Subject: Re: [edk2] Where to find the fix for security issue id 686 > >I understood this issue's fix was already released at some branch. >With your message things make sense again. > >In this case I can wait for this fix to be publicly available. >Thanks for the clarification! > >Best Regards >Rafael > >Em seg, 15 de out de 2018 às 16:42, Zimmer, Vincent < >vincent.zim...@intel.com> escreveu: > >> Ah ok >> >> >> >> From >> https://github.com/tianocore/tianocore.github.io/wiki/Reporting-Security- >Issues >> you will see that issues are only visible to the report and infosec group >> of Bugzilla, namely “Issues in the *Tianocore Security Issue* product are >> only visible to the *Reporter* of the issue and the members of the >> *infosec* group. ” >> >> >> >> Since you were not the reporter of 686 and are not part of infosec, you >> cannot see it. >> >> >> >> If you or anyone in the community would like to help work these issues >> while in triage and embargo, let me know and we can add you to the infosec >> group. >> >> >> >> Vincent >> >> >> >> *From:* Rafael Machado [mailto:rafaelrodrigues.mach...@gmail.com] >> *Sent:* Monday, October 15, 2018 12:17 PM >> *To:* Zimmer, Vincent <vincent.zim...@intel.com> >> *Cc:* edk2-devel@lists.01.org >> *Subject:* Re: [edk2] Where to find the fix for security issue id 686 >> >> >> >> Hi Vincent >> >> >> >> Thanks for the answer. >> >> The problem is that when I try to access this link I have this message: "You >> are not authorized to access bug #686." >> >> >> >> Any idea? >> >> >> >> Em seg, 15 de out de 2018 às 14:28, Zimmer, Vincent < >> vincent.zim...@intel.com> escreveu: >> >> You can find reference to patches via the advisory entry >> >> "31. EDK II TIANOCOMPRESS BOUNDS CHECKING ISSUES" advisory entry >> https://edk2-docs.gitbooks.io/security-advisory/content/edk-ii- >tianocompress-bounds-checking-issues.html >> has an embedded link to >> https://bugzilla.tianocore.org/attachment.cgi?id=150 >> >> Vincent >> >> -----Original Message----- >> From: edk2-devel [mailto:edk2-devel-boun...@lists.01.org] On Behalf Of >> Rafael Machado >> Sent: Monday, October 15, 2018 5:39 AM >> To: edk2-devel@lists.01.org >> Subject: [edk2] Where to find the fix for security issue id 686 >> >> Hi everyone >> >> I was tying to find the patch to fix the reported security issue id 686 ( >> https://bugzilla.tianocore.org/show_bug.cgi?id=686), >> but was not able to access it. >> >> Could someone please tell if this patch, or series of patches, was already >> merged to some branch that is public available? >> >> Thanks and Regards >> Rafael R. Machado >> _______________________________________________ >> edk2-devel mailing list >> edk2-devel@lists.01.org >> https://lists.01.org/mailman/listinfo/edk2-devel >> >> >_______________________________________________ >edk2-devel mailing list >edk2-devel@lists.01.org >https://lists.01.org/mailman/listinfo/edk2-devel _______________________________________________ edk2-devel mailing list edk2-devel@lists.01.org https://lists.01.org/mailman/listinfo/edk2-devel
