Debian Package Tracker

general

source: libesedb (main)
version: 20181229-3.1
maintainer: Debian Security Tools (DMD)
uploaders: Hilko Bengen [DMD]
arch: any
std-ver: 4.3.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 20170121-2
stable: 20181229-3
testing: 20181229-3.1
unstable: 20181229-3.1

versioned links

20170121-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
20181229-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
20181229-3.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libesedb-dev
libesedb-utils
libesedb1
python3-libesedb

action needed

A new upstream version is available: 20200418 high

A new upstream version 20200418 is available, you should consider packaging it.

Created: 2020-06-29 Last update: 2020-08-13 08:02

4 security issues in stretch high

There are 4 open security issues in stretch.

4 important issues:

CVE-2018-15158: ** DISPUTED ** The libesedb_page_read_values function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.
CVE-2018-15159: ** DISPUTED ** The libesedb_page_read_tags function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.
CVE-2018-15160: ** DISPUTED ** The libesedb_catalog_definition_read function in libesedb_catalog_definition.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.
CVE-2018-15161: ** DISPUTED ** The libesedb_key_append_data function in libesedb_key.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.

Please fix them.

Created: 2018-09-02 Last update: 2020-08-07 06:08

4 security issues in sid high

There are 4 open security issues in sid.

4 important issues:

CVE-2018-15158: ** DISPUTED ** The libesedb_page_read_values function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.
CVE-2018-15159: ** DISPUTED ** The libesedb_page_read_tags function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.
CVE-2018-15160: ** DISPUTED ** The libesedb_catalog_definition_read function in libesedb_catalog_definition.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.
CVE-2018-15161: ** DISPUTED ** The libesedb_key_append_data function in libesedb_key.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.

Please fix them.

Created: 2018-09-02 Last update: 2020-08-07 06:08

4 security issues in buster high

There are 4 open security issues in buster.

4 important issues:

CVE-2018-15158: ** DISPUTED ** The libesedb_page_read_values function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.
CVE-2018-15159: ** DISPUTED ** The libesedb_page_read_tags function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.
CVE-2018-15160: ** DISPUTED ** The libesedb_catalog_definition_read function in libesedb_catalog_definition.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.
CVE-2018-15161: ** DISPUTED ** The libesedb_key_append_data function in libesedb_key.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.

Please fix them.

Created: 2018-09-02 Last update: 2020-08-07 06:08

4 security issues in bullseye high

There are 4 open security issues in bullseye.

4 important issues:

CVE-2018-15158: ** DISPUTED ** The libesedb_page_read_values function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.
CVE-2018-15159: ** DISPUTED ** The libesedb_page_read_tags function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.
CVE-2018-15160: ** DISPUTED ** The libesedb_catalog_definition_read function in libesedb_catalog_definition.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.
CVE-2018-15161: ** DISPUTED ** The libesedb_key_append_data function in libesedb_key.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.

Please fix them.

Created: 2019-07-07 Last update: 2020-08-07 06:08

Multiarch hinter reports 1 issue(s) normal

There are issues with the multiarch metadata for this package.

python3-libesedb could be marked Multi-Arch: same

Created: 2020-02-11 Last update: 2020-08-13 08:06

7 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 21fea877312e2c58a2957d497eeaf8e21794c7d9
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Thu Jun 25 15:06:17 2020 +0000

    Remove Section on libesedb1 that duplicates source.
    
    Fixes: lintian: binary-control-field-duplicates-source
    See-also: https://lintian.debian.org/tags/binary-control-field-duplicates-source.html

commit 38107001699f91197f88a28780f52293e817d636
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Thu Jun 25 15:05:37 2020 +0000

    Update standards version to 4.5.0, no changes needed.
    
    Fixes: lintian: out-of-date-standards-version
    See-also: https://lintian.debian.org/tags/out-of-date-standards-version.html

commit 0f5a5f328f7116216359f612d6019e4b0b2ffc9b
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Thu Jun 25 15:04:56 2020 +0000

    Set upstream metadata fields: Bug-Database, Bug-Submit.
    
    Fixes: lintian: upstream-metadata-file-is-missing
    See-also: https://lintian.debian.org/tags/upstream-metadata-file-is-missing.html
    
    
    Fixes: lintian: upstream-metadata-missing-bug-tracking
    See-also: https://lintian.debian.org/tags/upstream-metadata-missing-bug-tracking.html

commit 0ed0565bc3fb92d65ee9365010077c62d3f62044
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Thu Jun 25 15:04:14 2020 +0000

    Set debhelper-compat version in Build-Depends.
    
    Fixes: lintian: uses-debhelper-compat-file
    See-also: https://lintian.debian.org/tags/uses-debhelper-compat-file.html

commit 536ee04a9277022c2c0dc66634eecd486fc6975a
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Thu Jun 25 15:03:33 2020 +0000

    Use secure copyright file specification URI.
    
    Fixes: lintian: insecure-copyright-format-uri
    See-also: https://lintian.debian.org/tags/insecure-copyright-format-uri.html

commit 36107295964ca265566bd0d0f5f489ba58fc206e
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Thu Jun 25 15:02:53 2020 +0000

    Trim trailing whitespace.
    
    Fixes: lintian: file-contains-trailing-whitespace
    See-also: https://lintian.debian.org/tags/file-contains-trailing-whitespace.html

commit 2df4ada37ab78f4afa1729a8872b10f32f2e5049
Author: Samuel Henrique <samueloph@debian.org>
Date:   Sun Feb 9 18:29:16 2020 +0000

    Configure git-buildpackage for Debian

Created: 2020-02-09 Last update: 2020-08-09 21:05

lintian reports 4 warnings normal

Lintian reports 4 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2020-07-29 Last update: 2020-07-29 12:32

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2018-11-26 Last update: 2018-11-26 20:44

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.5.0 instead of 4.3.0).

Created: 2019-07-08 Last update: 2020-01-30 00:39

news

[rss feed]

[2020-02-09] libesedb 20181229-3.1 MIGRATED to testing (Debian testing watch)
[2020-02-09] libesedb 20181229-3.1 MIGRATED to testing (Debian testing watch)
[2020-01-29] Accepted libesedb 20181229-3.1 (source) into unstable (Adrian Bunk)
[2019-01-29] libesedb 20181229-3 MIGRATED to testing (Debian testing watch)
[2019-01-27] Accepted libesedb 20181229-3 (source) into unstable (Hilko Bengen)
[2019-01-26] Accepted libesedb 20181229-2 (source) into unstable (Hilko Bengen)
[2019-01-13] Accepted libesedb 20181229-1 (source) into unstable (Hilko Bengen)
[2018-08-26] libesedb 20170121-5 MIGRATED to testing (Debian testing watch)
[2018-08-20] Accepted libesedb 20170121-5 (source) into unstable (Hilko Bengen)
[2018-01-21] libesedb 20170121-4 MIGRATED to testing (Debian testing watch)
[2018-01-16] Accepted libesedb 20170121-4 (source) into unstable (Hilko Bengen)
[2017-11-19] libesedb 20170121-3 MIGRATED to testing (Debian testing watch)
[2017-11-19] libesedb 20170121-3 MIGRATED to testing (Debian testing watch)
[2017-11-14] Accepted libesedb 20170121-3 (source amd64) into unstable, unstable (Hilko Bengen)
[2017-02-26] Accepted libesedb 20170121-2~bpo8+1 (source amd64) into jessie-backports->backports-policy, jessie-backports (Paul Wise)
[2017-02-05] libesedb 20170121-2 MIGRATED to testing (Debian testing watch)
[2017-01-25] Accepted libesedb 20170121-2 (source) into unstable (Hilko Bengen)
[2017-01-22] Accepted libesedb 20170121-1 (source) into unstable (Hilko Bengen)
[2016-12-16] Accepted libesedb 20151213-1~bpo8+1 (source amd64) into jessie-backports, jessie-backports (Paul Wise)
[2015-12-30] libesedb 20151213-1 MIGRATED to testing (Debian testing watch)
[2015-12-24] Accepted libesedb 20151213-1 (source) into unstable (Hilko Bengen)
[2015-12-18] libesedb 20151205-1 MIGRATED to testing (Debian testing watch)
[2015-12-12] Accepted libesedb 20151205-1 (source) into unstable (Hilko Bengen)
[2015-08-08] libesedb 20150409-2 MIGRATED to testing (Britney)
[2015-08-02] Accepted libesedb 20150409-2 (source amd64) into unstable (Hilko Bengen)
[2015-07-31] libesedb 20150409-1 MIGRATED to testing (Britney)
[2015-07-20] Accepted libesedb 20150409-1 (source amd64) into unstable, unstable (Hilko Bengen)

bugs [bug history graph]

all: 1
RC: 0
I&N: 1
M&W: 0
F&P: 0
patch: 0

links

homepage
buildd: logs, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 20181229-3.1