Re: CVE-2015-7547: critical bug in libc

On Thu, 18 Feb 2016 08:39:32 -0600 (CST) Dan Mack <mack_at_macktronics.com> wrote

> On Thu, 18 Feb 2016, Joe Holden wrote:
> 
> > On 17/02/2016 14:07, Daniel Kalchev wrote:
> >>
> >>> On 17.02.2016 ?., at 15:40, Shawn Webb <shawn.webb_at_hardenedbsd.org>
> >>> wrote: >>>
> >>> TL;DR: FreeBSD is not affected by CVE-2015-7547.
> >>
> >>
> >> Unless you use Linux applications under emulation.
> >>
> >> Daniel
> >>
> > Which is supported by ports so at most it should be a ports advisory and 
> > not a FreeBSD (base) SA and therefore not on the website.
> >
> > Just my 2p ;)
> 
> Documenting and putting out security advisiories for other operating
> systems seems like a bad precedent in general.  The same could be said
> for runniing java applications, windows under bhyve, etc. - *sigh* -
> if the cross over use is common via a port, then have the port maybe
> remind users to consult their distribution specific security
> vulnerabilites prior to running it maybe - which is what they should
> be doing anyway.
> 
> That's my two insignificant cents :-)
> 
> Dan
If Sell distributes a bad batch of gasoline. It's not Chevrolet's
responsibility to inform it's car buyers/owners, that Shell produced
a bad batch of gasoline. Is it? :)

--Chris