[Libguestfs] Re: [libnbd PATCH] docs: Mention CVE-2023-5871
On Tue, Oct 31, 2023 at 05:37:27PM +0000, Richard W.M. Jones wrote:
On Tue, Oct 31, 2023 at 09:54:16AM -0500, Eric Blake wrote:
> Point to the list archives for more details about the recent fix in
> commit 177308adb1. The issue is deemed low risk, but every security
> bug should be mentioned.
>
> Signed-off-by: Eric Blake <eblake(a)redhat.com>
>
> ---
>
> The URL may change as a result of getting the list migration stable
> (doing another re-import to get more than 2 years of list history may
> impact things); I'm also trying to figure out if mailman3/hyperkitty
> has a way to get a shorter permalink URL under 80 columns that will
> point to a given message. So for now, I'll hold off on pushing this
> patch until we know we are ready for it.
Now that the list archives are stable, I've finally pushed this
(commit 328ad118). I'll probably push a few other unannounced patches
as I spot other URLs to update (such as where to report bugs, list
archives, updating existing URLs where it makes sense, ...).
--
Eric Blake, Principal Software Engineer
Red Hat, Inc.
Virtualization: qemu.org | libguestfs.org