diff options
| author | Siddhesh Poyarekar <siddhesh@sourceware.org> | 2024-01-24 13:37:20 -0500 |
|---|---|---|
| committer | Siddhesh Poyarekar <siddhesh@sourceware.org> | 2024-01-30 13:58:57 -0500 |
| commit | 443c10018cb1e33cd6a054c32eb62881f1dcfca2 (patch) | |
| tree | 51298cbb6ed2a8841805c581ff85795efdb37ba0 /advisories/GLIBC-SA-2023-0004 | |
| parent | 6cdc44214253a74e7140d75a7ebfc900820a5fa8 (diff) | |
| download | glibc-443c10018cb1e33cd6a054c32eb62881f1dcfca2.tar.gz glibc-443c10018cb1e33cd6a054c32eb62881f1dcfca2.tar.xz glibc-443c10018cb1e33cd6a054c32eb62881f1dcfca2.zip | |
Update advisory format and introduce some automation
Simplify the advisory format by dropping the -Backport tags and instead stick to using just the -Commit tags. To identify backports, put a substring of git-describe into the release version in the brackets next to the commit ref. This way, it not only identifies that the fix (or regression) is on the release/2.YY/master branch, it also disambiguates regressions/fixes in the branch from those in the tarball. Add a README to make it easier for consumers to understand the format. Additionally, the Release wiki needs to be updated to inform the release manager to: 1. Generate a NEWS snipped from the advisories directory AND 2. on release/2.YY/master, replace the advisories directory with a text file pointing to the advisories directory in master so that we don't have to update multiple locations. Signed-off-by: Siddhesh Poyarekar <siddhesh@sourceware.org> Reviewed-by: Andreas K. Hüttel <dilfridge@gentoo.org>
Diffstat (limited to 'advisories/GLIBC-SA-2023-0004')
| -rw-r--r-- | advisories/GLIBC-SA-2023-0004 | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/advisories/GLIBC-SA-2023-0004 b/advisories/GLIBC-SA-2023-0004 index cba13db38f..5286a7aa54 100644 --- a/advisories/GLIBC-SA-2023-0004 +++ b/advisories/GLIBC-SA-2023-0004 @@ -9,8 +9,8 @@ CVE-Id: CVE-2023-4911 Public-Date: 2023-10-03 Vulnerable-Commit: 2ed18c5b534d9e92fc006202a5af0df6b72e7aca (2.34) Fix-Commit: 1056e5b4c3f2d90ed2b4a55f96add28da2f4c8fa (2.39) -Fix-Backport: dcc367f148bc92e7f3778a125f7a416b093964d9 (2.34) -Fix-Backport: c84018a05aec80f5ee6f682db0da1130b0196aef (2.35) -Fix-Backport: 22955ad85186ee05834e47e665056148ca07699c (2.36) -Fix-Backport: b4e23c75aea756b4bddc4abcf27a1c6dca8b6bd3 (2.37) -Fix-Backport: 750a45a783906a19591fb8ff6b7841470f1f5701 (2.38) +Fix-Commit: dcc367f148bc92e7f3778a125f7a416b093964d9 (2.34-423) +Fix-Commit: c84018a05aec80f5ee6f682db0da1130b0196aef (2.35-274) +Fix-Commit: 22955ad85186ee05834e47e665056148ca07699c (2.36-118) +Fix-Commit: b4e23c75aea756b4bddc4abcf27a1c6dca8b6bd3 (2.37-45) +Fix-Commit: 750a45a783906a19591fb8ff6b7841470f1f5701 (2.38-27) |