about summary refs log tree commit diff
path: root/advisories/GLIBC-SA-2023-0003
diff options
context:
space:
mode:
authorSiddhesh Poyarekar <siddhesh@sourceware.org>2024-01-24 13:37:20 -0500
committerSiddhesh Poyarekar <siddhesh@sourceware.org>2024-01-30 13:58:57 -0500
commit443c10018cb1e33cd6a054c32eb62881f1dcfca2 (patch)
tree51298cbb6ed2a8841805c581ff85795efdb37ba0 /advisories/GLIBC-SA-2023-0003
parent6cdc44214253a74e7140d75a7ebfc900820a5fa8 (diff)
downloadglibc-443c10018cb1e33cd6a054c32eb62881f1dcfca2.tar.gz
glibc-443c10018cb1e33cd6a054c32eb62881f1dcfca2.tar.xz
glibc-443c10018cb1e33cd6a054c32eb62881f1dcfca2.zip
Update advisory format and introduce some automation
Simplify the advisory format by dropping the -Backport tags and instead
stick to using just the -Commit tags.  To identify backports, put a
substring of git-describe into the release version in the brackets next
to the commit ref.  This way, it not only identifies that the fix (or
regression) is on the release/2.YY/master branch, it also disambiguates
regressions/fixes in the branch from those in the tarball.

Add a README to make it easier for consumers to understand the format.
Additionally, the Release wiki needs to be updated to inform the release
manager to:

1. Generate a NEWS snipped from the advisories directory

AND

2. on release/2.YY/master, replace the advisories directory with a text
   file pointing to the advisories directory in master so that we don't
   have to update multiple locations.

Signed-off-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
Reviewed-by: Andreas K. Hüttel <dilfridge@gentoo.org>
Diffstat (limited to 'advisories/GLIBC-SA-2023-0003')
-rw-r--r--advisories/GLIBC-SA-2023-000310
1 files changed, 5 insertions, 5 deletions
diff --git a/advisories/GLIBC-SA-2023-0003 b/advisories/GLIBC-SA-2023-0003
index 0950dc0792..d3aef80348 100644
--- a/advisories/GLIBC-SA-2023-0003
+++ b/advisories/GLIBC-SA-2023-0003
@@ -8,8 +8,8 @@ arbitrary memory.
 CVE-Id: CVE-2023-4806
 Public-Date: 2023-09-12
 Fix-Commit: 973fe93a5675c42798b2161c6f29c01b0e243994 (2.39)
-Fix-Backport: e09ee267c03e3150c2c9ba28625ab130705a485e (2.34)
-Fix-Backport: e3ccb230a961b4797510e6a1f5f21fd9021853e7 (2.35)
-Fix-Backport: a9728f798ec7f05454c95637ee6581afaa9b487d (2.36)
-Fix-Backport: 6529a7466c935f36e9006b854d6f4e1d4876f942 (2.37)
-Fix-Backport: 00ae4f10b504bc4564e9f22f00907093f1ab9338 (2.38)
+Fix-Commit: e09ee267c03e3150c2c9ba28625ab130705a485e (2.34-420)
+Fix-Commit: e3ccb230a961b4797510e6a1f5f21fd9021853e7 (2.35-270)
+Fix-Commit: a9728f798ec7f05454c95637ee6581afaa9b487d (2.36-115)
+Fix-Commit: 6529a7466c935f36e9006b854d6f4e1d4876f942 (2.37-39)
+Fix-Commit: 00ae4f10b504bc4564e9f22f00907093f1ab9338 (2.38-20)