Re: [PATCH] DoS in RPC implementation (CVE-2011-4069)

[Jeff Law <law at redhat dot com>]

On 11/28/2012 12:14 PM, Carlos O'Donell wrote:
> > Here's the updated version with the patch to sunrpc/Versions eliminated.
>
> Please inline your patches (see the contribution checklist please) it
> makes it much easier to carry out the reply/review cycle :-)
I haven't found a way to make thunderbird do that yet :(

> ~~~
>
> Which is the reason for the update in the contribution checklist here:
> http://sourceware.org/glibc/wiki/Contribution%20checklist#Update_Copyright_Information
>
> Please add a new copyright notice to the files in addition to the oracle one.
Sorry, I must have mis-remembered the rules WRT files from external 
sources.  I'll fix up the copyrights.  If I read the rules correctly, 
I'll need to add a separate FSF copyright prior to the Oracle copyright 
notice.  Correct?

Also, I don't see a line in the NEWS file for CVEs without associated 
BZs.  I could create a BZ and add it to the NEWS file or I could just 
have a separate entry for this CVE.  I don't have a strong opinion here.

jeff