From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received-SPF: Pass (sender SPF authorized) identity=mailfrom; client-ip=2607:f8b0:4864:20::32e; helo=mail-ot1-x32e.google.com; envelope-from=rafaelrodrigues.machado@gmail.com; receiver=edk2-devel@lists.01.org Received: from mail-ot1-x32e.google.com (mail-ot1-x32e.google.com [IPv6:2607:f8b0:4864:20::32e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ml01.01.org (Postfix) with ESMTPS id B2CD721163714 for ; Mon, 15 Oct 2018 12:17:02 -0700 (PDT) Received: by mail-ot1-x32e.google.com with SMTP id o21so20003135otb.13 for ; Mon, 15 Oct 2018 12:17:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=67jJDlh85W2cWgbHnfaoJMzoCS378ayF8mXowGzEb7Y=; b=aqpT7q9liyVnYdpyqRbYRuxwj5AtufFMf5LcB8ff+MxT9x8Y5BoW+XZmUpq1l02NtT nFwdnLUGxaRLUnp30V3SKc6dmdS/YfgGXKoBlF77OkAbdMyc+vv4lgrs9cNCIoIYJI5S Pb0DTKeNRliTxgtp8Bn9ouUprPeswKhl7nfANn+ljEucuR8YD5RrvJPc2GjYf78r6dJ2 bKkdJcFwSIgfvfJg4moY8u/tD3SDDcPKU7t0OYNd/KonCZAU895WyrY2JM3pZqqEd7tv e8fQX4grXIUJAmcMP/q06rIBTQcBflA3ECb7ZTi58qLN1x5b8GeuMrKbRsn20bnSfIQD czIA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=67jJDlh85W2cWgbHnfaoJMzoCS378ayF8mXowGzEb7Y=; b=ojz931JOxckPtpA2Keob9/jd3iK16Q81xWgtK2l1ipAFDi5tTAMWO80IfRiWUBhIfK jPKGpMWtdAZtN5XdgbVmb0lrz+j3wybetatAZ9b7diJ55LsdJuuTBVz3uejsASi8dQ7H 8ko4ZPmuxyZi6tEHneOBHd33UBC6ELo3PJzTlsKHvXn5RG8SGppEln7s1TPKggi33V6N vjqkWa+n95kzGKKQ9llhCjBw5qLUxoqT4HMhcken0IPBHGgKqCvbk8zLN1UQFK+lbjza p1VeQOK8bKZt6J37LGphUETcc4ziq5xy/Su+uL8aW6wr2B+HU4Y57tD1CWxm1QGtNWa2 zR9w== X-Gm-Message-State: ABuFfoiiFnp5atdfteBNTQ3YYsDpQFcr9CpyZAo8IpRA8qc47sjFePfB cf49oOuFnb88vauRGY0ta6z5+5csphlpXEyFRio= X-Google-Smtp-Source: ACcGV61H245qHW5fvdSM+yvccf8yVSmvZ7KeSXVExHYSvXjglWfRrqIXjchrc2uX9F1vvC0kscaiwT/2kEiiFKcRtgo= X-Received: by 2002:a9d:7998:: with SMTP id h24mr12329789otm.175.1539631021637; Mon, 15 Oct 2018 12:17:01 -0700 (PDT) MIME-Version: 1.0 References: <76DE84138CBE89489874B70B432D8F9BC7E3A103@FMSMSX151.amr.corp.intel.com> In-Reply-To: <76DE84138CBE89489874B70B432D8F9BC7E3A103@FMSMSX151.amr.corp.intel.com> From: Rafael Machado Date: Mon, 15 Oct 2018 16:16:49 -0300 Message-ID: To: "Zimmer, Vincent" Cc: "edk2-devel@lists.01.org" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 Subject: Re: Where to find the fix for security issue id 686 X-BeenThere: edk2-devel@lists.01.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: EDK II Development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Oct 2018 19:17:02 -0000 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Vincent Thanks for the answer. The problem is that when I try to access this link I have this message: "Yo= u are not authorized to access bug #686." Any idea? Em seg, 15 de out de 2018 =C3=A0s 14:28, Zimmer, Vincent < vincent.zimmer@intel.com> escreveu: > You can find reference to patches via the advisory entry > > "31. EDK II TIANOCOMPRESS BOUNDS CHECKING ISSUES" advisory entry > https://edk2-docs.gitbooks.io/security-advisory/content/edk-ii-tianocompr= ess-bounds-checking-issues.html > has an embedded link to > https://bugzilla.tianocore.org/attachment.cgi?id=3D150 > > Vincent > > -----Original Message----- > From: edk2-devel [mailto:edk2-devel-bounces@lists.01.org] On Behalf Of > Rafael Machado > Sent: Monday, October 15, 2018 5:39 AM > To: edk2-devel@lists.01.org > Subject: [edk2] Where to find the fix for security issue id 686 > > Hi everyone > > I was tying to find the patch to fix the reported security issue id 686 ( > https://bugzilla.tianocore.org/show_bug.cgi?id=3D686), > but was not able to access it. > > Could someone please tell if this patch, or series of patches, was alread= y > merged to some branch that is public available? > > Thanks and Regards > Rafael R. Machado > _______________________________________________ > edk2-devel mailing list > edk2-devel@lists.01.org > https://lists.01.org/mailman/listinfo/edk2-devel >