<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">On 3 February 2016 at 06:19, Yuanjie Huang <span dir="ltr"><<a href="mailto:Yuanjie.Huang@windriver.com" target="_blank">Yuanjie.Huang@windriver.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div id=":5t9" class="a3s" style="overflow:hidden">From: Yuanjie Huang <<a href="mailto:yuanjie.huang@windriver.com">yuanjie.huang@windriver.com</a>><br>
<br>
According to <a href="http://seclists.org/oss-sec/2016/q1/153" rel="noreferrer" target="_blank">http://seclists.org/oss-sec/2016/q1/153</a><br>
<br>
CVE-2015-8777<br>
<br>
LD_POINTER_GUARD was an environment variable which controls<br>
security-related behavior, but was not ignored for privileged binaries<br>
(in AT_SECURE mode). This might allow local attackers (who can supply<br>
the environment variable) to bypass intended security restriction.<br>
Ref: <a href="https://sourceware.org/bugzilla/show_bug.cgi?id=18928" rel="noreferrer" target="_blank">https://sourceware.org/bugzilla/show_bug.cgi?id=18928</a><br>
<br>
CVE-2015-8779<br>
<br>
A stack overflow (unbounded alloca) in the catopen function can cause<br>
applications which pass long strings to the catopen function to crash<br>
or, potentially execute arbitrary code.<br>
Ref: <a href="https://sourceware.org/bugzilla/show_bug.cgi?id=17905" rel="noreferrer" target="_blank">https://sourceware.org/bugzilla/show_bug.cgi?id=17905</a></div></blockquote></div><br>We're trying to annotate patches that fix CVEs now, so can you add eg CVE: CVE-2015-8777 tag alongside the signed-off-by and upstream-status?</div><div class="gmail_extra"><br></div><div class="gmail_extra">Cheers,</div><div class="gmail_extra">Ross</div></div>