This is the mail archive of the
libc-alpha@sourceware.org
mailing list for the glibc project.
Re: [PATCH] Add security bugs to NEWS
- From: Adhemerval Zanella <adhemerval dot zanella at linaro dot org>
- To: Joseph Myers <joseph at codesourcery dot com>, Florian Weimer <fweimer at redhat dot com>
- Cc: GNU C Library <libc-alpha at sourceware dot org>
- Date: Wed, 17 Feb 2016 15:47:04 -0200
- Subject: Re: [PATCH] Add security bugs to NEWS
- Authentication-results: sourceware.org; auth=none
- References: <56A000F8 dot 4030507 at redhat dot com> <alpine dot DEB dot 2 dot 10 dot 1602171717550 dot 18373 at digraph dot polyomino dot org dot uk> <56C4AC8D dot 8010505 at redhat dot com> <alpine dot DEB dot 2 dot 10 dot 1602171726460 dot 18373 at digraph dot polyomino dot org dot uk>
On 17-02-2016 15:27, Joseph Myers wrote:
> On Wed, 17 Feb 2016, Florian Weimer wrote:
>
>> On 02/17/2016 06:18 PM, Joseph Myers wrote:
>>> On Wed, 20 Jan 2016, Florian Weimer wrote:
>>>
>>>> This patch adds the recent CVE assignments to the NEWS file.
>>>
>>> What happened to this patch - why hasn't it been committed? We're very
>>> close to the release now, and this is a release blocker.
>>
>> I'm just following the rule that all patches during the hard freeze have
>> to be approved by the release manager.
>
> I don't think that should apply to NEWS updates.
This is also my understanding since the patches itself is upstream
(although some wording/spelling corrections may apply).
>
> More generally, has anyone reviewed the changes since 2.22 for any
> significant non-bug-fix changes that ought to have NEWS entries but don't?
>
Good question, I will check this out.