Re: gdb: Add TODO referencing CVE

[Jason Bacon <outpaddling%yahoo.com@localhost>]

On 2019-04-17 12:43, Leonardo Taccari wrote:
> Hello Jason,
>
> Jason Bacon writes:
> > [...]
> > Log Message:
> > gdb: Add TODO referencing CVE
> > [...]
> > +
> > +https://sourceware.org/bugzilla/show_bug.cgi?id=21600
> Isn't it CVE-2017-9778? (if that's the case we have a pkg-vulnerabilities
> entry about it and this TODO file can be removed)
>
> Usually we maintain a list of possible vulnerabilities in wip/*/TODO
> file in order to integrate them in pkg-vulnerabilities when wip
> packages are imported and to make users aware of them.
> But for packages already in pkgsrc (non-wip) entries should be in
> pkg-vulnerabilities.
>
>
> Thank you!
I added the TODO to provide a direct link to a clear description of the 
problem and to remind myself to see if we can fix the vulnerability and 
remove gdb from pkg-vulnerabilities on the next commit.

Cheers,

???? JB