Re: nss security wheezy updates ready for testing
On Thu, Apr 07, 2016 at 04:44:07PM -0400, Antoine Beaupré wrote:
> On 2016-03-31 10:12:04, Guido Günther wrote:
> > On Tue, Mar 29, 2016 at 04:28:36PM -0400, Antoine Beaupré wrote:
> >> On 2016-03-26 04:33:29, Guido Günther wrote:
> >> > Until that it might make sense to add
> >> >
> >> > https://github.com/agx/nss-debian/commit/98ff42c58343d70b1b51c8c997b471822c1675f1
> >> > also at https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=806639
> >> >
> >> > which (in addition to the certificate test I added) runs the standard
> >> > nss test cycle as autopkgtest. I've tested this with the sid version but
> >> > not with wheezy/jessie yet.
> >> It seems like you had those already, and I have included them in the
> >> package here.
> >> So here's another debdiff for review and testing. This should fix all
> >> standing issues on wheezy *but* CVE-2015-4000 and CVE-2015-7575.
> > $ diffstat nss_3.14.5-1+deb7u6.debdiff
> > changelog | 33 ++++++++++
> > patches/CVE-2015-7181.patch | 142 ++++++++++++++++++++++++++++++++++++++++++++
> > patches/CVE-2015-7182.patch | 126 +++++++++++++++++++++++++++++++++++++++
> > patches/CVE-2016-1938.patch | 89 +++++++++++++++++++++++++++
> > patches/CVE-2016-1950.patch | 96 +++++++++++++++++++++++++++++
> > patches/CVE-2016-1978.patch | 96 +++++++++++++++++++++++++++++
> > patches/CVE-2016-1979.patch | 68 +++++++++++++++++++++
> > patches/series | 6 +
> > rules | 14 ++++
> > 9 files changed, 670 insertions(+)
> > doesn't add anything under debian/tests so it seems the autopkg
> > mentioned in the changelog went missing.
> Hmm... maybe I misunderstand how that stuff works, but the tests were
> ran anyways...
The tests run so far are the tests run during package build time (via
debian/rules). The ones in debian/tests are run on the installed
package (via autopkgtest). E.g by using
from pbuilder (or ci.debian.net). I'll post a debdiff for jessie