Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.bugs.dist > #828589
| Path | csiph.com!3.us.feeder.erje.net!2.us.feeder.erje.net!feeder.erje.net!2.eu.feeder.erje.net!news2.arglkargh.de!news.mixmin.net!news.unit0.net!news.panservice.it!bofh.it!news.nic.it!robomod |
|---|---|
| From | 0x2a <0x2a@correcthorsebatterystaple.xyz> |
| Newsgroups | linux.debian.bugs.dist |
| Subject | Bug#864728: security.debian.org: OVAL def generator generates tests only for source packages |
| Date | Tue, 13 Jun 2017 18:20:01 +0200 |
| Message-ID | <tRWHT-1JS-9@gated-at.bofh.it> (permalink) |
| X-Original-To | Debian Bug Tracking System <submit@bugs.debian.org> |
| X-Mailbox-Line | From debian-bugs-dist-request@lists.debian.org Tue Jun 13 16:15:12 2017 |
| Old-Return-Path | <debbugs@buxtehude.debian.org> |
| X-Spam-Flag | NO |
| X-Spam-Score | -4.2 |
| Reply-To | 0x2a <0x2a@correcthorsebatterystaple.xyz>, 864728@bugs.debian.org |
| Resent-To | debian-bugs-dist@lists.debian.org |
| Resent-Cc | 0x2a@correcthorsebatterystaple.xyz, Debian Security Team <team@security.debian.org> |
| X-Debian-Pr-Message | report 864728 |
| X-Debian-Pr-Package | security.debian.org |
| X-Spam-Bayes | score:0.0000 Tokens: new, 18; hammy, 79; neutral, 24; spammy, 1. spammytokens:0.953-+--H*r:bugs.debian.org hammytokens:0.000-+--H*x:6.6.6, 0.000-+--H*UA:6.6.6, 0.000-+--H*M:reportbug, 0.000-+--H*MI:reportbug, 0.000-+--H*x:reportbug |
| Content-Type | text/plain; charset="us-ascii" |
| MIME-Version | 1.0 |
| Content-Transfer-Encoding | 7bit |
| X-Mailer | reportbug 6.6.6~bpo8 |
| X-Debian-Message | from BTS |
| X-Mailing-List | <debian-bugs-dist@lists.debian.org> archive/latest/1379447 |
| List-ID | <debian-bugs-dist.lists.debian.org> |
| List-URL | <https://lists.debian.org/debian-bugs-dist/> |
| Approved | robomod@news.nic.it |
| Lines | 6 |
| Organization | linux.* mail to news gateway |
| Sender | robomod@news.nic.it |
| X-Original-Date | Tue, 13 Jun 2017 16:12:48 +0000 |
| X-Original-Message-ID | <20170613161248.7649.25992.reportbug@mail> |
| Xref | csiph.com linux.debian.bugs.dist:828589 |
Show key headers only | View raw
Package: security.debian.org Severity: important The generated OVAL tests only check the version of the source package, not packages built from it. An example would be DSA-3872-1 (CVE-2017-5461, CVE-2017-5462, CVE-2017-7502), where the test checks the *nss* package, not *libnss3*, thus causing a false negative, since *nss* is not installed.
Back to linux.debian.bugs.dist | Previous | Next — Next in thread | Find similar | Unroll thread
Bug#864728: security.debian.org: OVAL def generator generates tests only for source packages 0x2a <0x2a@correcthorsebatterystaple.xyz> - 2017-06-13 18:20 +0200
Bug#864728: security.debian.org: OVAL def generator generates tests only for source packages Salvatore Bonaccorso <carnil@debian.org> - 2017-06-13 22:10 +0200
Bug#864728: security.debian.org: OVAL def generator generates tests only for source packages 0x2a <0x2a@correcthorsebatterystaple.xyz> - 2017-06-16 16:40 +0200
csiph-web