Debian Package Tracker

general

source: libesedb (main)
version: 20181229-3.1
maintainer: Debian Security Tools (DMD)
uploaders: Hilko Bengen [DMD]
arch: any
std-ver: 4.3.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 20170121-2
stable: 20181229-3
testing: 20181229-3.1
unstable: 20181229-3.1

versioned links

20170121-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
20181229-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
20181229-3.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libesedb-dev
libesedb-utils
libesedb1
python3-libesedb

action needed

A new upstream version is available: 20191220 high

A new upstream version 20191220 is available, you should consider packaging it.

Created: 2019-11-16 Last update: 2020-02-17 06:20

4 security issues in buster high

There are 4 open security issues in buster.

4 important issues:

CVE-2018-15159: ** DISPUTED ** The libesedb_page_read_tags function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.
CVE-2018-15158: ** DISPUTED ** The libesedb_page_read_values function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.
CVE-2018-15160: ** DISPUTED ** The libesedb_catalog_definition_read function in libesedb_catalog_definition.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.
CVE-2018-15161: ** DISPUTED ** The libesedb_key_append_data function in libesedb_key.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.

Please fix them.

Created: 2018-09-02 Last update: 2020-02-09 06:01

4 security issues in bullseye high

There are 4 open security issues in bullseye.

4 important issues:

CVE-2018-15159: ** DISPUTED ** The libesedb_page_read_tags function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.
CVE-2018-15158: ** DISPUTED ** The libesedb_page_read_values function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.
CVE-2018-15160: ** DISPUTED ** The libesedb_catalog_definition_read function in libesedb_catalog_definition.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.
CVE-2018-15161: ** DISPUTED ** The libesedb_key_append_data function in libesedb_key.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.

Please fix them.

Created: 2019-07-07 Last update: 2020-02-09 06:01

4 security issues in sid high

There are 4 open security issues in sid.

4 important issues:

CVE-2018-15159: ** DISPUTED ** The libesedb_page_read_tags function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.
CVE-2018-15158: ** DISPUTED ** The libesedb_page_read_values function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.
CVE-2018-15160: ** DISPUTED ** The libesedb_catalog_definition_read function in libesedb_catalog_definition.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.
CVE-2018-15161: ** DISPUTED ** The libesedb_key_append_data function in libesedb_key.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.

Please fix them.

Created: 2018-09-02 Last update: 2020-02-09 06:01

4 security issues in stretch high

There are 4 open security issues in stretch.

4 important issues:

CVE-2018-15159: ** DISPUTED ** The libesedb_page_read_tags function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.
CVE-2018-15158: ** DISPUTED ** The libesedb_page_read_values function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.
CVE-2018-15160: ** DISPUTED ** The libesedb_catalog_definition_read function in libesedb_catalog_definition.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.
CVE-2018-15161: ** DISPUTED ** The libesedb_key_append_data function in libesedb_key.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments.

Please fix them.

Created: 2018-09-02 Last update: 2020-02-09 06:01

Multiarch hinter reports 1 issue(s) normal

There are issues with the multiarch metadata for this package.

python3-libesedb could be marked Multi-Arch: same

Created: 2020-02-11 Last update: 2020-02-17 06:23

1 new commit since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 2df4ada37ab78f4afa1729a8872b10f32f2e5049
Author: Samuel Henrique <samueloph@debian.org>
Date:   Sun Feb 9 18:29:16 2020 +0000

    Configure git-buildpackage for Debian

Created: 2020-02-09 Last update: 2020-02-15 09:36

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2018-11-26 Last update: 2018-11-26 20:44

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.5.0 instead of 4.3.0).

Created: 2019-07-08 Last update: 2020-01-30 00:39

news

[rss feed]

[2020-02-09] libesedb 20181229-3.1 MIGRATED to testing (Debian testing watch)
[2020-02-09] libesedb 20181229-3.1 MIGRATED to testing (Debian testing watch)
[2020-01-29] Accepted libesedb 20181229-3.1 (source) into unstable (Debian FTP Masters) (signed by: Adrian Bunk)
[2019-01-29] libesedb 20181229-3 MIGRATED to testing (Debian testing watch)
[2019-01-27] Accepted libesedb 20181229-3 (source) into unstable (Hilko Bengen)
[2019-01-26] Accepted libesedb 20181229-2 (source) into unstable (Hilko Bengen)
[2019-01-13] Accepted libesedb 20181229-1 (source) into unstable (Hilko Bengen)
[2018-08-26] libesedb 20170121-5 MIGRATED to testing (Debian testing watch)
[2018-08-20] Accepted libesedb 20170121-5 (source) into unstable (Hilko Bengen)
[2018-01-21] libesedb 20170121-4 MIGRATED to testing (Debian testing watch)
[2018-01-16] Accepted libesedb 20170121-4 (source) into unstable (Hilko Bengen)
[2017-11-19] libesedb 20170121-3 MIGRATED to testing (Debian testing watch)
[2017-11-19] libesedb 20170121-3 MIGRATED to testing (Debian testing watch)
[2017-11-14] Accepted libesedb 20170121-3 (source amd64) into unstable, unstable (Hilko Bengen)
[2017-02-26] Accepted libesedb 20170121-2~bpo8+1 (source amd64) into jessie-backports->backports-policy, jessie-backports (Paul Wise)
[2017-02-05] libesedb 20170121-2 MIGRATED to testing (Debian testing watch)
[2017-01-25] Accepted libesedb 20170121-2 (source) into unstable (Hilko Bengen)
[2017-01-22] Accepted libesedb 20170121-1 (source) into unstable (Hilko Bengen)
[2016-12-16] Accepted libesedb 20151213-1~bpo8+1 (source amd64) into jessie-backports, jessie-backports (Paul Wise)
[2015-12-30] libesedb 20151213-1 MIGRATED to testing (Debian testing watch)
[2015-12-24] Accepted libesedb 20151213-1 (source) into unstable (Hilko Bengen)
[2015-12-18] libesedb 20151205-1 MIGRATED to testing (Debian testing watch)
[2015-12-12] Accepted libesedb 20151205-1 (source) into unstable (Hilko Bengen)
[2015-08-08] libesedb 20150409-2 MIGRATED to testing (Britney)
[2015-08-02] Accepted libesedb 20150409-2 (source amd64) into unstable (Hilko Bengen)
[2015-07-31] libesedb 20150409-1 MIGRATED to testing (Britney)
[2015-07-20] Accepted libesedb 20150409-1 (source amd64) into unstable, unstable (Hilko Bengen)

bugs [bug history graph]

all: 1
RC: 0
I&N: 1
M&W: 0
F&P: 0
patch: 0

links

homepage
buildd: logs, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 20181229-3ubuntu2
patches for 20181229-3ubuntu2