Tatsuo Ishii [EMAIL PROTECTED] writes:
One of our engineer claimed that double free bug itself is a
vulnerability, thus 8.2.1 release should be called as security
release.
[ shrug... ] AFAICS the crashing bugs we fixed in 8.2.1 can't be
exploited for anything beyond crashing the backend, and
Ok, understood.
--
Tatsuo Ishii
SRA OSS, Inc. Japan
Tatsuo Ishii [EMAIL PROTECTED] writes:
One of our engineer claimed that double free bug itself is a
vulnerability, thus 8.2.1 release should be called as security
release.
[ shrug... ] AFAICS the crashing bugs we fixed in 8.2.1 can't
Tom,
Is this a fix for security hole/vulnerability?
One of our engineer claimed that double free bug itself is a
vulnerability, thus 8.2.1 release should be called as security
release.
--
Tatsuo Ishii
SRA OSS, Inc. Japan
Log Message:
---
Fix failure due to accessing an already-freed