Re: ASAN builds and exiv2
On Thu, Nov 23, 2017 at 02:51:56PM -0500, Antoine Beaupré wrote:
>
> Fun times. So I'm stuck now - I reported the CVE issues upstream so
> they're at least aware of the issue:
>
> https://github.com/Exiv2/exiv2/issues/174
>
> ... but I am not sure what to do with the package in Wheezy. I'm tempted
> to mark this as no-dsa because there's no upstream fix and we can't
> reproduce, but I wonder if we should just mark it as not-affected
> instead.
>
> Opinions?
>
Antoine,
The problems you reported sound quite puzzling. Would you like for me
to try to at least to see if I can get the ASAN build to complete
without failing? Did you have to adjust any dependencies to get exiv2
to build in jessie?
Regards,
-Roberto
--
Roberto C. Sánchez
Reply to: