GNU bug report logs - #23513
package.el treats empty signatures as correct

Previous Next

Package: emacs;

Reported by: "L. Dixon" <_ <at> lizzie.io>

Date: Wed, 11 May 2016 18:23:01 UTC

Severity: important

Tags: patch, security

Done: Paul Eggert <eggert <at> cs.ucla.edu>

Bug is archived. No further changes may be made.

Full log

Message #23 received at 23513 <at> debbugs.gnu.org (full text, mbox):

From: Dmitry Gutov <dgutov <at> yandex.ru>
To: 23513 <at> debbugs.gnu.org, Glenn Morris <rgm <at> gnu.org>
Cc: "L. Dixon" <_ <at> lizzie.io>
Subject: Re: bug#23513: package.el treats empty signatures as correct
Date: Sun, 15 May 2016 00:38:30 +0300

On 05/11/2016 12:39 PM, L. Dixon wrote:

> I also deleted the skip-unless clause in the package-test-signed,
> since the test runs normally without it. I may be misunderstanding
> something here, but I'm worried that skipping this test will mask
> similar issues or regressions.

That's definitely a cause for concern. Glenn, does Hydra lack the 
necessary libraries to support the package signature check?

Why do we skip this test there? It seems important.
This bug report was last modified 9 years and 8 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.