I understood this issue's fix was already released at some branch. With your message things make sense again.
In this case I can wait for this fix to be publicly available. Thanks for the clarification! Best Regards Rafael Em seg, 15 de out de 2018 às 16:42, Zimmer, Vincent < [email protected]> escreveu: > Ah ok > > > > From > https://github.com/tianocore/tianocore.github.io/wiki/Reporting-Security-Issues > you will see that issues are only visible to the report and infosec group > of Bugzilla, namely “Issues in the *Tianocore Security Issue* product are > only visible to the *Reporter* of the issue and the members of the > *infosec* group. ” > > > > Since you were not the reporter of 686 and are not part of infosec, you > cannot see it. > > > > If you or anyone in the community would like to help work these issues > while in triage and embargo, let me know and we can add you to the infosec > group. > > > > Vincent > > > > *From:* Rafael Machado [mailto:[email protected]] > *Sent:* Monday, October 15, 2018 12:17 PM > *To:* Zimmer, Vincent <[email protected]> > *Cc:* [email protected] > *Subject:* Re: [edk2] Where to find the fix for security issue id 686 > > > > Hi Vincent > > > > Thanks for the answer. > > The problem is that when I try to access this link I have this message: "You > are not authorized to access bug #686." > > > > Any idea? > > > > Em seg, 15 de out de 2018 às 14:28, Zimmer, Vincent < > [email protected]> escreveu: > > You can find reference to patches via the advisory entry > > "31. EDK II TIANOCOMPRESS BOUNDS CHECKING ISSUES" advisory entry > https://edk2-docs.gitbooks.io/security-advisory/content/edk-ii-tianocompress-bounds-checking-issues.html > has an embedded link to > https://bugzilla.tianocore.org/attachment.cgi?id=150 > > Vincent > > -----Original Message----- > From: edk2-devel [mailto:[email protected]] On Behalf Of > Rafael Machado > Sent: Monday, October 15, 2018 5:39 AM > To: [email protected] > Subject: [edk2] Where to find the fix for security issue id 686 > > Hi everyone > > I was tying to find the patch to fix the reported security issue id 686 ( > https://bugzilla.tianocore.org/show_bug.cgi?id=686), > but was not able to access it. > > Could someone please tell if this patch, or series of patches, was already > merged to some branch that is public available? > > Thanks and Regards > Rafael R. Machado > _______________________________________________ > edk2-devel mailing list > [email protected] > https://lists.01.org/mailman/listinfo/edk2-devel > > _______________________________________________ edk2-devel mailing list [email protected] https://lists.01.org/mailman/listinfo/edk2-devel
