about summary refs log tree commit diff
path: root/advisories/GLIBC-SA-2023-0002
diff options
context:
space:
mode:
authorSiddhesh Poyarekar <siddhesh@sourceware.org>2024-01-24 13:37:20 -0500
committerSiddhesh Poyarekar <siddhesh@sourceware.org>2024-01-30 13:58:57 -0500
commit443c10018cb1e33cd6a054c32eb62881f1dcfca2 (patch)
tree51298cbb6ed2a8841805c581ff85795efdb37ba0 /advisories/GLIBC-SA-2023-0002
parent6cdc44214253a74e7140d75a7ebfc900820a5fa8 (diff)
downloadglibc-443c10018cb1e33cd6a054c32eb62881f1dcfca2.tar.gz
glibc-443c10018cb1e33cd6a054c32eb62881f1dcfca2.tar.xz
glibc-443c10018cb1e33cd6a054c32eb62881f1dcfca2.zip
Update advisory format and introduce some automation
Simplify the advisory format by dropping the -Backport tags and instead
stick to using just the -Commit tags.  To identify backports, put a
substring of git-describe into the release version in the brackets next
to the commit ref.  This way, it not only identifies that the fix (or
regression) is on the release/2.YY/master branch, it also disambiguates
regressions/fixes in the branch from those in the tarball.

Add a README to make it easier for consumers to understand the format.
Additionally, the Release wiki needs to be updated to inform the release
manager to:

1. Generate a NEWS snipped from the advisories directory

AND

2. on release/2.YY/master, replace the advisories directory with a text
   file pointing to the advisories directory in master so that we don't
   have to update multiple locations.

Signed-off-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
Reviewed-by: Andreas K. Hüttel <dilfridge@gentoo.org>
Diffstat (limited to 'advisories/GLIBC-SA-2023-0002')
-rw-r--r--advisories/GLIBC-SA-2023-00026
1 files changed, 3 insertions, 3 deletions
diff --git a/advisories/GLIBC-SA-2023-0002 b/advisories/GLIBC-SA-2023-0002
index 32e45f524f..5122669a64 100644
--- a/advisories/GLIBC-SA-2023-0002
+++ b/advisories/GLIBC-SA-2023-0002
@@ -10,6 +10,6 @@ CVE-Id: CVE-2023-4527
 Public-Date: 2023-09-12
 Vulnerable-Commit: f282cdbe7f436c75864e5640a409a10485e9abb2 (2.36)
 Fix-Commit: bd77dd7e73e3530203be1c52c8a29d08270cb25d (2.39)
-Fix-Backport: 4ea972b7edd7e36610e8cde18bf7a8149d7bac4f (2.36)
-Fix-Backport: b7529346025a130fee483d42178b5c118da971bb (2.37)
-Fix-Backport: b25508dd774b617f99419bdc3cf2ace4560cd2d6 (2.38)
+Fix-Commit: 4ea972b7edd7e36610e8cde18bf7a8149d7bac4f (2.36-113)
+Fix-Commit: b7529346025a130fee483d42178b5c118da971bb (2.37-38)
+Fix-Commit: b25508dd774b617f99419bdc3cf2ace4560cd2d6 (2.38-19)