This is the mail archive of the
libc-alpha@sourceware.org
mailing list for the glibc project.
Re: [PATCH] Ignore LD_POINTER_GUARD for set-user-ID/set-group-ID binaries.
- From: Florian Weimer <fw at deneb dot enyo dot de>
- To: Hector Marco-Gisbert <hecmargi at upv dot es>
- Cc: Joseph Myers <joseph at codesourcery dot com>, "Carlos O'Donell" <carlos at redhat dot com>, GNU C Library <libc-alpha at sourceware dot org>, Siddhesh Poyarekar <siddhesh at redhat dot com>, Andreas Jaeger <aj at suse dot com>, Ismael Ripoll Ripoll <iripoll at upv dot es>
- Date: Sun, 06 Sep 2015 18:42:49 +0200
- Subject: Re: [PATCH] Ignore LD_POINTER_GUARD for set-user-ID/set-group-ID binaries.
- Authentication-results: sourceware.org; auth=none
- References: <1441471191-4683-1-git-send-email-hecmargi at upv dot es> <alpine dot DEB dot 2 dot 10 dot 1509051727320 dot 16949 at digraph dot polyomino dot org dot uk> <55EC5EB7 dot 70105 at upv dot es>
* Hector Marco-Gisbert:
> The CVE assignment has changed, and now I don't know who is in charge
> of assigning CVE. A few months ago we requested CVEs (for a different
> topic) to mitre and we got no answer.
You reported the issue publicly to oss-security. At this point, only
MITRE can assign CVE IDs.
Fortunately, a CVE ID is not required for fixing this bug in glibc.
We'll need a bug report, though. If you cannot file one yourself,
let us know, and we'll take care of it.