Re: nss: CVE-2015-7181, CVE-2015-7182 and CVE-2015-4000 [was nss: CVE-2015-4000]

To: Guido Günther <agx@sigxcpu.org>
Cc: debian-lts@lists.debian.org, team@security.debian.org
Subject: Re: nss: CVE-2015-7181, CVE-2015-7182 and CVE-2015-4000 [was nss: CVE-2015-4000]
From: Luciano Bello <luciano@debian.org>
Date: Thu, 10 Dec 2015 18:27:54 +0100
Message-id: <[🔎] 8661852.gC6xeMkAlz@box>
In-reply-to: <20151128131633.GA31725@bogon.m.sigxcpu.org>
References: <20151128131633.GA31725@bogon.m.sigxcpu.org>

On Saturday 28 November 2015 14.16.33 Guido Günther wrote:

> I've attached the patches for review. These also add some minimal

> autopkgtest to exercise the ASN1 parser (affected by the above CVEs).

> I'm happy about any review.

Thanks for your work and sorry for the delay in the answer.

I will review your patches during the weekend. I have no idea how to handle your questions regarding CVE-2015-4000. Maybe somebody else in the security team has an opinion?

Regards!

/luciano

Reply to:

Prev by Date: Re: Further Review Of MySQL 5.5 Packages [1]
Next by Date: squeeze update of cacti?
Previous by thread: Re: DSA for libphp-phpmailer?
Next by thread: squeeze update of cacti?
Index(es):
- Date
- Thread