Hi Sylvain and Yves-Alexis, On 11/2/26 09:53, Yves-Alexis Perez wrote:
On Mon, 2026-11-02 at 16:37 +0100, Sylvain Beucler wrote:I built deb12u5 and deb12u6 with ASan in a Bookworm container, then looked at each CVE directly; a small harness linked against libstrongswan for the library bugs, and a couple of Python > IKE peers in separate network namespaces for the charon ones.In this case, would it be interesting to test in one or more full VMs, with the bookworm kernel, as I believe there's strong ;) interaction with ipsec kernel support?Hey, it's always interesting to test on a real box to make sure everything is OK but I don't really anticipate issues with the charon/kernel communications if the testsuite works fine.
Just in case, I ran the same checks again in a Bookworm virtual machine, using the same AddressSanitizer builds of 5.9.8-5+deb12u5 and 5.9.8-5+deb12u6. I'm seeing the same results as I did in an LXD container. Nice one though, I'll add that to my list for next time. :) Thank you both for your time! Best regards, Simon Quigley [email protected]
OpenPGP_signature.asc
Description: OpenPGP digital signature
