Re: gnutls 3.2.12 / GNUTLS-SA-2014-2

[Ludovic Courtès]

Nikos Mavrogiannopoulos <address@hidden> skribis:

>  It seems that this bug got quite some publicity and I even started
> receiving mail from random people. If anyone has any suggestions on
> gnutls project workflow please post it here, and (more important)
> volunteer to take up some work. Judging is easy, doing the actual work
> isn't.

I think it would be great if you could at least run ‘make distcheck’
with all the optional features enabled before releasing.  The Guile test
suite was bound to fail here, so you would have caught that.

Back in the day we had set up GnuTLS on hydra.nixos.org with several
configurations.  That means that, ideally, at each push you can see if
any of the less common configurations or platforms fails.  I think it
helps a lot.

My 2¢,
Ludo’.