On Saturday 28 November 2015 14.16.33 Guido Günther wrote: > I've attached the patches for review. These also add some minimal > autopkgtest to exercise the ASN1 parser (affected by the above CVEs). > > I'm happy about any review.
Thanks for your work and sorry for the delay in the answer. I will review your patches during the weekend. I have no idea how to handle your questions regarding CVE-2015-4000. Maybe somebody else in the security team has an opinion? Regards! /luciano
