Re: [yocto] HEADSUP - CVE 2015-023 remote code execution in glibc

2015-01-29 Thread Sona Sarmadi
> Subject: Re: [yocto] HEADSUP - CVE 2015-023 remote code execution in glibc > Alexandr, > On 01/28/2015 03:17 AM, Damian, Alexandru wrote: >> More details >> >>http://www.openwall.com/lists/oss-security/2015/01/27/9 >> >> redhat bug and patch >> >

Re: [yocto] HEADSUP - CVE 2015-023 remote code execution in glibc

2015-01-28 Thread akuster
Alexandr, On 01/28/2015 03:17 AM, Damian, Alexandru wrote: More details http://www.openwall.com/lists/oss-security/2015/01/27/9 redhat bug and patch https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-0235 Do we need to open a bug to track this ? I am working on patches already. if you

Re: [yocto] HEADSUP - CVE 2015-023 remote code execution in glibc

2015-01-28 Thread Paul Eggleton
On Wednesday 28 January 2015 11:20:27 Burton, Ross wrote: > On 28 January 2015 at 11:17, Damian, Alexandru > wrote: > > Do we need to open a bug to track this ? > > Probably for the best to ensure it goes into all the branches we support. FYI, none of the branches we still officially support use

Re: [yocto] HEADSUP - CVE 2015-023 remote code execution in glibc

2015-01-28 Thread Burton, Ross
On 28 January 2015 at 11:17, Damian, Alexandru wrote: > Do we need to open a bug to track this ? > Probably for the best to ensure it goes into all the branches we support. Ross -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproj

[yocto] HEADSUP - CVE 2015-023 remote code execution in glibc

2015-01-28 Thread Damian, Alexandru
More details http://www.openwall.com/lists/oss-security/2015/01/27/9 redhat bug and patch https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-0235 Do we need to open a bug to track this ? -- Alex Damian Yocto Project SSG / OTC -- ___ yocto mailin