Re: Where to find the fix for security issue id 686

["Zimmer, Vincent" <vincent.zimmer@intel.com>]

Ah ok

From https://github.com/tianocore/tianocore.github.io/wiki/Reporting-Security-Issues you will see that issues are only visible to the report and infosec group of Bugzilla, namely “Issues in the Tianocore Security Issue product are only visible to the Reporter of the issue and the members of the infosec group. ”

Since you were not the reporter of 686 and are not part of infosec, you cannot see it.

If you or anyone in the community would like to help work these issues while in triage and embargo, let me know and we can add you to the infosec group.

Vincent

From: Rafael Machado [mailto:rafaelrodrigues.machado@gmail.com]
Sent: Monday, October 15, 2018 12:17 PM
To: Zimmer, Vincent <vincent.zimmer@intel.com>
Cc: edk2-devel@lists.01.org
Subject: Re: [edk2] Where to find the fix for security issue id 686

Hi Vincent

Thanks for the answer.
The problem is that when I try to access this link I have this message: "You are not authorized to access bug #686."

Any idea?

Em seg, 15 de out de 2018 às 14:28, Zimmer, Vincent <vincent.zimmer@intel.com<mailto:vincent.zimmer@intel.com>> escreveu:
You can find reference to patches via the advisory entry

"31. EDK II TIANOCOMPRESS BOUNDS CHECKING ISSUES" advisory entry https://edk2-docs.gitbooks.io/security-advisory/content/edk-ii-tianocompress-bounds-checking-issues.html has an embedded link to https://bugzilla.tianocore.org/attachment.cgi?id=150

Vincent

-----Original Message-----
From: edk2-devel [mailto:edk2-devel-bounces@lists.01.org<mailto:edk2-devel-bounces@lists.01.org>] On Behalf Of Rafael Machado
Sent: Monday, October 15, 2018 5:39 AM
To: edk2-devel@lists.01.org<mailto:edk2-devel@lists.01.org>
Subject: [edk2] Where to find the fix for security issue id 686

Hi everyone

I was tying to find the patch to fix the reported security issue id 686 ( https://bugzilla.tianocore.org/show_bug.cgi?id=686),
but was not able to access it.

Could someone please tell if this patch, or series of patches, was already merged to some branch that is public available?

Thanks and Regards
Rafael R. Machado
_______________________________________________
edk2-devel mailing list
edk2-devel@lists.01.org<mailto:edk2-devel@lists.01.org>
https://lists.01.org/mailman/listinfo/edk2-devel