* Fwd: Registering the supplementary patch of CVE-2013-0290 as CVE
[not found] <CAK=B_CvNi1O93Sjy_WG5VSH_+njHsKrOk9ZwHDh5VH8MNTCTGg@mail.gmail.com>
@ 2021-08-09 8:17 ` EJ Choi
0 siblings, 0 replies; only message in thread
From: EJ Choi @ 2021-08-09 8:17 UTC (permalink / raw)
To: linux-kernel
Hi,
I'm Eunji Choi, and I'm working on incomplete security patch detection for OSS.
While I was looking for some cases, I found commit
add05ad4e9f5c4efee9b98535db5efa32b0d0492
which is the supplementary patch for commit
77c1090f94d1b0b5186fb13a1b71b47b1343f87f (fixes CVE-2013-0290).
It seems that the problem related to system call failure occurred
due to the previous patch and has been fixed.
(Incomplete fix for CVE-2013-0290)
I searched the multiple public security vulnerability database(such as NVD),
and couldn't find any information about the patch(add05a).
Registering the problem and its patch commit as new CVE seems to be
helpful for people using Linux.
Because some people can apply the previous patch to their SW to fix
CVE-2013-0290.
I'd like to hear your opinion.
Thank you,
Eunjin Choi.
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2021-08-09 8:18 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
[not found] <CAK=B_CvNi1O93Sjy_WG5VSH_+njHsKrOk9ZwHDh5VH8MNTCTGg@mail.gmail.com>
2021-08-09 8:17 ` Fwd: Registering the supplementary patch of CVE-2013-0290 as CVE EJ Choi
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).