[PATCH v3] [BZ #15857] malloc: Check for integer overflow in memalign.

[Allan McRae]

On 12/09/13 17:24, Will Newton wrote:
> On 12 September 2013 03:19, Russ Allbery <rra@stanford.edu> wrote:
>> Siddhesh Poyarekar <siddhesh.poyarekar@gmail.com> writes:
>>> On 11 September 2013 16:02, Will Newton <will.newton@linaro.org> wrote:
>>
>>>> I'm not sure what the process is here, MAINTAINERS on the wiki has a
>>>> link to CERT, but I aware that there are folks who work for CVE issuing
>>>> authorities on this list. ;-)
>>
>>> I've seen people emailing requests for CVE numbers on the oss-security
>>> mailing list (oss-security at lists dot openwall dot com).
>>
>> For some reason, this document is remarkably hard to find in Google, but
>> here's the process:
>>
>>     https://people.redhat.com/kseifrie/CVE-OpenSource-Request-HOWTO.html
> 
> Thanks, the issue has been assigned CVE-2013-4332.
> 

Now there is a CVE assigned, it would be good to add a NEWS entry saying
it has been fixed.