fail2ban - Debian Package Tracker

general

source: fail2ban (main)
version: 0.11.2-2
maintainer: Debian Python Team (DMD)
uploaders: Sylvestre Ledru [DMD] – Yaroslav Halchenko [DMD]
arch: all
std-ver: 4.5.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.9.6-2
o-o-bpo: 0.10.2-2~bpo9+1
oldstable: 0.10.2-2.1
stable: 0.11.2-2
testing: 0.11.2-2
unstable: 0.11.2-2

versioned links

0.9.6-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.10.2-2~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.10.2-2.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.11.2-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

fail2ban (98 bugs: 1, 73, 24, 0)

action needed

Problems while searching for a new upstream version high

uscan had problems while searching for a new upstream version:

In debian/watch no matching files for watch line
  https://github.com/fail2ban/fail2ban/tags .*archive/(\d[\d\.]+).tar.gz

Created: 2021-03-22 Last update: 2021-09-22 01:37

lintian reports 1 error and 26 warnings high

Lintian reports 1 error and 26 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2021-09-06 Last update: 2021-09-06 18:32

16 bugs tagged patch in the BTS normal

The BTS contains patches fixing 16 bugs, consider including or untagging them.

Created: 2021-08-14 Last update: 2021-09-22 03:00

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 0.11.2-3, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit fc00681c48813b2aef121036d6d98cc32f2876a1
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Wed Aug 25 16:31:43 2021 +0000

    Update standards version to 4.5.1, no changes needed.
    
    Changes-By: lintian-brush
    Fixes: lintian: out-of-date-standards-version
    See-also: https://lintian.debian.org/tags/out-of-date-standards-version.html

commit 5e2909be511ff2b65d41f5581cfd67afaab6590a
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Wed Aug 25 16:31:37 2021 +0000

    Bump debhelper from old 12 to 13.
    
    Changes-By: lintian-brush
    Fixes: lintian: package-uses-old-debhelper-compat-version
    See-also: https://lintian.debian.org/tags/package-uses-old-debhelper-compat-version.html

commit 05ffe57b3b8f89cdd50a603a6fc94e4ebf2f1cfb
Merge: c934386f 9675479e
Author: Jelmer Vernooĳ <jelmer@debian.org>
Date:   Mon Aug 23 06:16:46 2021 +0000

    Merge branch 'scrub-obsolete' into 'master'
    
    Remove unnecessary constraints
    
    See merge request python-team/packages/fail2ban!3

commit 9675479ef91816b6c419c73fcc21a53054f096bd
Author: Jenkins <jenkins@jenkins.debian.net>
Date:   Tue Jul 13 19:39:53 2021 +0000

    Remove constraints unnecessary since stretch
    
    * Build-Depends: Drop versioned constraint on debhelper.
    
    Changes-By: deb-scrub-obsolete

Created: 2021-08-23 Last update: 2021-09-16 23:35

1 low-priority security issue in buster low

There is 1 open security issue in buster.

1 issue left for the package maintainer to handle:

CVE-2021-32749: (needs triaging) fail2ban is a daemon to ban hosts that cause multiple authentication errors. In versions 0.9.7 and prior, 0.10.0 through 0.10.6, and 0.11.0 through 0.11.2, there is a vulnerability that leads to possible remote code execution in the mailing action mail-whois. Command `mail` from mailutils package used in mail actions like `mail-whois` can execute command if unescaped sequences (`\n~`) are available in "foreign" input (for instance in whois output). To exploit the vulnerability, an attacker would need to insert malicious characters into the response sent by the whois server, either via a MITM attack or by taking over a whois server. The issue is patched in versions 0.10.7 and 0.11.3. As a workaround, one may avoid the usage of action `mail-whois` or patch the vulnerability manually.

You can find information about how to handle this issue in the security team's documentation.

Created: 2021-07-16 Last update: 2021-08-15 00:00

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.6.0 instead of 4.5.0).

Created: 2018-04-16 Last update: 2021-08-18 14:02

news

[rss feed]

[2021-07-18] fail2ban 0.11.2-2 MIGRATED to testing (Debian testing watch)
[2021-07-12] Accepted fail2ban 0.11.2-2 (source) into unstable (Sylvestre Ledru)
[2020-12-01] fail2ban 0.11.2-1 MIGRATED to testing (Debian testing watch)
[2020-11-26] Accepted fail2ban 0.11.2-1 (source) into unstable (Sylvestre Ledru)
[2020-11-24] Accepted fail2ban 0.11.1-4 (source) into unstable (Sylvestre Ledru)
[2020-11-23] Accepted fail2ban 0.11.1-3 (source) into unstable (Sylvestre Ledru)
[2020-04-21] fail2ban 0.11.1-2 MIGRATED to testing (Debian testing watch)
[2020-04-16] Accepted fail2ban 0.11.1-2 (source) into unstable (Sylvestre Ledru)
[2020-03-07] fail2ban 0.11.1-1 MIGRATED to testing (Debian testing watch)
[2020-03-02] Accepted fail2ban 0.11.1-1 (source) into unstable (Sylvestre Ledru)
[2020-02-17] Accepted fail2ban 0.11.1-1~exp3 (source) into experimental (Sylvestre Ledru)
[2020-01-13] Accepted fail2ban 0.11.1-1~exp2 (source) into experimental (Sylvestre Ledru)
[2020-01-12] Accepted fail2ban 0.11.1-1~exp1 (source) into experimental (Sylvestre Ledru)
[2019-01-11] Accepted fail2ban 0.10.2-2~bpo9+1 (source all) into stretch-backports, stretch-backports (Alexander GQ Gerasiov)
[2018-09-30] fail2ban 0.10.2-2.1 MIGRATED to testing (Debian testing watch)
[2018-09-24] Accepted fail2ban 0.10.2-2.1 (source) into unstable (Mattia Rizzolo)
[2018-04-09] fail2ban 0.10.2-2 MIGRATED to testing (Debian testing watch)
[2018-04-04] Accepted fail2ban 0.10.2-2 (source all) into unstable (Yaroslav Halchenko)
[2018-01-28] fail2ban 0.10.2-1 MIGRATED to testing (Debian testing watch)
[2018-01-23] Accepted fail2ban 0.10.2-1 (source all) into unstable (Yaroslav Halchenko)
[2017-08-09] fail2ban 0.9.7-2 MIGRATED to testing (Debian testing watch)
[2017-08-04] Accepted fail2ban 0.9.7-2 (source all) into unstable (Yaroslav Halchenko)
[2017-05-11] Accepted fail2ban 0.9.7-1 (source all) into experimental (Yaroslav Halchenko)
[2017-04-20] fail2ban 0.9.6-2 MIGRATED to testing (Debian testing watch)
[2017-04-17] Accepted fail2ban 0.9.6-2 (source all) into unstable (Yaroslav Halchenko)
[2016-12-21] fail2ban 0.9.6-1 MIGRATED to testing (Debian testing watch)
[2016-12-11] Accepted fail2ban 0.9.6-1 (source all) into unstable (Yaroslav Halchenko)
[2016-07-15] Accepted fail2ban 0.9.5-1 (source all) into unstable (Yaroslav Halchenko)
[2016-03-08] Accepted fail2ban 0.9.4-1 (source all) into unstable (Yaroslav Halchenko)
[2015-08-07] fail2ban 0.9.3-1 MIGRATED to testing (Britney)

bugs [bug history graph]

all: 99 100
RC: 1
I&N: 75
M&W: 23 24
F&P: 0
patch: 16
NC: 1

links

homepage
buildd: logs, clang, reproducibility
popcon
browse source code
edit tags
other distros
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 0.11.2-2
42 bugs