Re: Patch to Vulnerability Linkage

2014-10-03 Thread Nathan McGarvey
Thanks much for the list and all the rapid patch releases as of late. Good stuff. -Nathan On Fri, Oct 3, 2014 at 8:56 AM, Chet Ramey wrote: > On 10/3/14, 4:55 AM, Nathan McGarvey wrote: > > Is there any linkage between bash patches and known CVE (or any other > > databas

Patch to Vulnerability Linkage

2014-10-03 Thread Nathan McGarvey
Is there any linkage between bash patches and known CVE (or any other database) IDs? (Source-code comment, bug-tracker, etc.) I understand that there is not a one<->one relationship, but for the bug-fixes that do pertain to one or more vulnerability entry, it may be beneficial to outrigh

Re: Bash-4.3 Official Patch 27

2014-09-28 Thread Nathan McGarvey
Does anyone know if Red Hat intends on remerging with official bash? (This may be better directed at a seperate thread with them.) -Nathan On Sep 28, 2014 12:49 AM, "Eric Blake" wrote: > On 09/27/2014 08:50 PM, Chet Ramey wrote: > >BASH PATCH REPORT > >

Re: Bash-4.3 Official Patch 26

2014-09-26 Thread Nathan McGarvey
Pardon my catching up. This (and all the other related patches for other past versions) is to remedy CVE-2014-7169 and CVE-2014-6271 was remedied by the previous Patch 25 (and related set for all other versions.) Is this correct? Or are there still outstanding issues? -Nathan On 09/26/201