[PATCH v3] [BZ #15857] malloc: Check for integer overflow in memalign.

Will Newton will.newton@linaro.org
Thu Sep 12 07:24:00 GMT 2013


On 12 September 2013 03:19, Russ Allbery <rra@stanford.edu> wrote:
> Siddhesh Poyarekar <siddhesh.poyarekar@gmail.com> writes:
>> On 11 September 2013 16:02, Will Newton <will.newton@linaro.org> wrote:
>
>>> I'm not sure what the process is here, MAINTAINERS on the wiki has a
>>> link to CERT, but I aware that there are folks who work for CVE issuing
>>> authorities on this list. ;-)
>
>> I've seen people emailing requests for CVE numbers on the oss-security
>> mailing list (oss-security at lists dot openwall dot com).
>
> For some reason, this document is remarkably hard to find in Google, but
> here's the process:
>
>     https://people.redhat.com/kseifrie/CVE-OpenSource-Request-HOWTO.html

Thanks, the issue has been assigned CVE-2013-4332.

-- 
Will Newton
Toolchain Working Group, Linaro



More information about the Libc-alpha mailing list