Re: nss: CVE-2015-7181, CVE-2015-7182 and CVE-2015-4000 [was nss: CVE-2015-4000]

[Guido Günther <agx@sigxcpu.org>]

Hi Luciano,
On Thu, Dec 10, 2015 at 06:27:54PM +0100, Luciano Bello wrote:
> On Saturday 28 November 2015 14.16.33 Guido Günther wrote:
> > I've attached the patches for review. These also add some minimal
> > autopkgtest to exercise the ASN1 parser (affected by the above CVEs).
> > 
> > I'm happy about any review.
> 
> Thanks for your work and sorry for the delay in the answer.
> 
> I will review your patches during the weekend. I have no idea how to handle your 
> questions regarding CVE-2015-4000. Maybe somebody else in the security team 
> has an opinion?

Did you get a chance to look at the patches?
Cheers,
 -- Guido