source package has 1 unsatisfiable build dependency
high
Build dependencies in unstable cannot be satisfied on
ppc64el, armhf, mipsel, i386, amd64, arm64, s390x, mips64el, and armel
because: unsatisfied dependency on libbroker-dev
3 binary packages have unsatisfiable dependencies
high
The dependencies of bro=2.5.5-1+deb10u1 cannot be satisfied in unstable on
s390x, arm64, mipsel, and armhf
because: unsatisfied dependency on bro-common
CVE-2019-12175: In Zeek Network Security Monitor (formerly known as Bro) before 2.6.2, a NULL pointer dereference in the Kerberos (aka KRB) protocol parser leads to DoS because a case-type index is mishandled.
CVE-2018-16807: In Bro through 2.5.5, there is a memory leak potentially leading to DoS in scripts/base/protocols/krb/main.bro in the Kerberos protocol parser.
CVE-2019-12175: In Zeek Network Security Monitor (formerly known as Bro) before 2.6.2, a NULL pointer dereference in the Kerberos (aka KRB) protocol parser leads to DoS because a case-type index is mishandled.
CVE-2017-1000458: Bro before Bro v2.5.2 is vulnerable to an out of bounds write in the ContentLine analyzer allowing remote attackers to cause a denial of service (crash) and possibly other exploitation.
CVE-2018-17019: In Bro through 2.5.5, there is a DoS in IRC protocol names command parsing in analyzer/protocol/irc/IRC.cc.
Please fix them.
Standards version of the package is outdated.
wishlist
The package should be updated to follow the last version of Debian Policy
(Standards-Version 4.4.0 instead of
4.3.0).
![[bug history graph]](https://qa.debian.org/data/bts/graphs/b/bro.png){kind=link}