Hi, Le Sat, Oct 31, 2026 at 11:42:29AM -0500, Simon Quigley a écrit : > On 10/31/26 05:34, Yves-Alexis Perez wrote: > > On Thu, 2026-10-29 at 11:27 -0500, Simon Quigley wrote: > > > I built this in a Bookworm schroot [...] > > > > How did you test the various bugs firing? > > I built deb12u5 and deb12u6 with ASan in a Bookworm container, then > looked at each CVE directly; a small harness linked against > libstrongswan for the library bugs, and a couple of Python > IKE > peers in separate network namespaces for the charon ones.
In this case, would it be interesting to test in one or more full VMs, with the bookworm kernel, as I believe there's strong ;) interaction with ipsec kernel support? Cheers! Sylvain Beucler Debian LTS Team
