Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.bugs.dist > #828589
| From | 0x2a <0x2a@correcthorsebatterystaple.xyz> |
|---|---|
| Newsgroups | linux.debian.bugs.dist |
| Subject | Bug#864728: security.debian.org: OVAL def generator generates tests only for source packages |
| Date | 2017-06-13 18:20 +0200 |
| Message-ID | <tRWHT-1JS-9@gated-at.bofh.it> (permalink) |
| Organization | linux.* mail to news gateway |
Package: security.debian.org Severity: important The generated OVAL tests only check the version of the source package, not packages built from it. An example would be DSA-3872-1 (CVE-2017-5461, CVE-2017-5462, CVE-2017-7502), where the test checks the *nss* package, not *libnss3*, thus causing a false negative, since *nss* is not installed.
Back to linux.debian.bugs.dist | Previous | Next — Next in thread | Find similar | Unroll thread
Bug#864728: security.debian.org: OVAL def generator generates tests only for source packages 0x2a <0x2a@correcthorsebatterystaple.xyz> - 2017-06-13 18:20 +0200
Bug#864728: security.debian.org: OVAL def generator generates tests only for source packages Salvatore Bonaccorso <carnil@debian.org> - 2017-06-13 22:10 +0200
Bug#864728: security.debian.org: OVAL def generator generates tests only for source packages 0x2a <0x2a@correcthorsebatterystaple.xyz> - 2017-06-16 16:40 +0200
csiph-web