[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: nss security wheezy updates ready for testing



Hi,
On Thu, Apr 07, 2016 at 04:44:07PM -0400, Antoine Beaupré wrote:
> On 2016-03-31 10:12:04, Guido Günther wrote:
> > On Tue, Mar 29, 2016 at 04:28:36PM -0400, Antoine Beaupré wrote:
> >> On 2016-03-26 04:33:29, Guido Günther wrote:
> >> > Until that it might make sense to add
> >> >
> >> >     https://github.com/agx/nss-debian/commit/98ff42c58343d70b1b51c8c997b471822c1675f1
> >> >     also at https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=806639
> >> >
> >> > which (in addition to the certificate test I added) runs the standard
> >> > nss test cycle as autopkgtest. I've tested this with the sid version but
> >> > not with wheezy/jessie yet.
> >> 
> >> It seems like you had those already, and I have included them in the
> >> package here.
> >> 
> >> So here's another debdiff for review and testing. This should fix all
> >> standing issues on wheezy *but* CVE-2015-4000 and CVE-2015-7575.
> >
> > $ diffstat nss_3.14.5-1+deb7u6.debdiff 
> >  changelog                   |   33 ++++++++++
> >  patches/CVE-2015-7181.patch |  142 ++++++++++++++++++++++++++++++++++++++++++++
> >  patches/CVE-2015-7182.patch |  126 +++++++++++++++++++++++++++++++++++++++
> >  patches/CVE-2016-1938.patch |   89 +++++++++++++++++++++++++++
> >  patches/CVE-2016-1950.patch |   96 +++++++++++++++++++++++++++++
> >  patches/CVE-2016-1978.patch |   96 +++++++++++++++++++++++++++++
> >  patches/CVE-2016-1979.patch |   68 +++++++++++++++++++++
> >  patches/series              |    6 +
> >  rules                       |   14 ++++
> >  9 files changed, 670 insertions(+)
> >
> > doesn't add anything under debian/tests so it seems the autopkg
> > mentioned in the changelog went missing.
> 
> Hmm... maybe I misunderstand how that stuff works, but the tests were
> ran anyways...

The tests run so far are the tests run during package build time (via
debian/rules). The ones in debian/tests are run on the  installed
package (via autopkgtest). E.g by using

    /usr/share/doc/pbuilder/examples/B20autopkgtest

from pbuilder (or ci.debian.net). I'll post a debdiff for jessie
soonish.
Cheers,
 -- Guido


Reply to: