Re: Patch to Vulnerability Linkage

2014-10-03 Thread Nathan McGarvey
Thanks much for the list and all the rapid patch releases as of late. Good stuff. -Nathan On Fri, Oct 3, 2014 at 8:56 AM, Chet Ramey wrote: > On 10/3/14, 4:55 AM, Nathan McGarvey wrote: > > Is there any linkage between bash patches and known CVE (or any other > > database) IDs? (Source-code

Re: Patch to Vulnerability Linkage

2014-10-03 Thread Stephane Chazelas
2014-10-03 08:56:41 -0400, Chet Ramey: > On 10/3/14, 4:55 AM, Nathan McGarvey wrote: > > Is there any linkage between bash patches and known CVE (or any other > > database) IDs? (Source-code comment, bug-tracker, etc.) > > I understand that there is not a one<->one relationship, but for the

Re: Patch to Vulnerability Linkage

2014-10-03 Thread Chet Ramey
On 10/3/14, 4:55 AM, Nathan McGarvey wrote: > Is there any linkage between bash patches and known CVE (or any other > database) IDs? (Source-code comment, bug-tracker, etc.) > I understand that there is not a one<->one relationship, but for the > bug-fixes that do pertain to one or more vul

Patch to Vulnerability Linkage

2014-10-03 Thread Nathan McGarvey
Is there any linkage between bash patches and known CVE (or any other database) IDs? (Source-code comment, bug-tracker, etc.) I understand that there is not a one<->one relationship, but for the bug-fixes that do pertain to one or more vulnerability entry, it may be beneficial to outrigh