[Secure-testing-team] a candidate for EmbeddedCodeCopies

Salvatore Bonaccorso carnil at debian.org
Sun Mar 10 15:03:39 UTC 2013


Hi Alex

On Thu, Feb 28, 2013 at 09:11:30AM +0100, Alex Mestiashvili wrote:
> Dear secure-testing-team,
> 
> I am working on packaging of libsereal-{de,en}coder-perl modules [0],
> and it seem that the upstream uses modified code of snappy which is
> already packaged in Debian as libsnappy-dev.
> As the code is quite heavily modified I don't think that it can be
> substituted by libsnappy-dev.
> 
> Could you please check the code for vulnerabilities or inclusion to
> secure-testing svn repository?
> 
> The code is located under snappy/ directory.

Thank you for this notice. I have added an entry for
libsereal-{de,en}coder-perl using modified snappy code into the
embedded-code-copies files in svn.

Regards,
Salvatore



More information about the Secure-testing-team mailing list