Re: GHOST gethostbyname() heap overflow in glibc (CVE-2015-0235)

[Jan Schaumann <jschauma () netmeister org>]

Paul Pluzhnikov <ppluzhnikov () gmail com> wrote:
 
> If I was supposed to cry alarm, I would have to cry alarm every time
> there is a buffer overflow in glibc, which doesn't seem very useful.

How about a general guideline along the lines of "if the commit message
says it fixes a vulnerability, reference the CVE; if no CVE can be
found, request one"?

-Jan

Attachment: _bin
Description: