Re: CVE-2015-7547: critical bug in libc

From: Joe Holden <mail_at_m.jwh.me.uk>
Date: Thu, 25 Feb 2016 12:36:06 +0000
On 22/02/2016 00:04, Chris H wrote:
> On Thu, 18 Feb 2016 08:39:32 -0600 (CST) Dan Mack <mack_at_macktronics.com> wrote
>
>> On Thu, 18 Feb 2016, Joe Holden wrote:
>>
>>> On 17/02/2016 14:07, Daniel Kalchev wrote:
>>>>> On 17.02.2016 ?., at 15:40, Shawn Webb <shawn.webb_at_hardenedbsd.org>
>>>>> wrote: >>>
>>>>> TL;DR: FreeBSD is not affected by CVE-2015-7547.
>>>>
>>>> Unless you use Linux applications under emulation.
>>>>
>>>> Daniel
>>>>
>>> Which is supported by ports so at most it should be a ports advisory and
>>> not a FreeBSD (base) SA and therefore not on the website.
>>>
>>> Just my 2p ;)
>> Documenting and putting out security advisiories for other operating
>> systems seems like a bad precedent in general.  The same could be said
>> for runniing java applications, windows under bhyve, etc. - *sigh* -
>> if the cross over use is common via a port, then have the port maybe
>> remind users to consult their distribution specific security
>> vulnerabilites prior to running it maybe - which is what they should
>> be doing anyway.
>>
>> That's my two insignificant cents :-)
>>
>> Dan
> If Sell distributes a bad batch of gasoline. It's not Chevrolet's
> responsibility to inform it's car buyers/owners, that Shell produced
> a bad batch of gasoline. Is it? :)
>
> --Chris
Exactly, however it is done now so nevermind
Received on Thu Feb 25 2016 - 11:36:14 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:41:03 UTC