Version 1:1.9-2 of libextractor is marked for autoremoval from testing on Fri 13 Mar 2020. It is affected by #950171. The removal of libextractor will also cause the removal of (transitive) reverse dependencies: doodle, gnunet, gnunet-fuse, gnunet-gtk, libextractor-java, vdr-plugin-xineliboutput. You should try to prevent the removal by fixing these RC bugs.
CVE-2019-15531: GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c.
CVE-2019-15531: GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c.
Please fix it.
Standards version of the package is outdated.
wishlist
The package should be updated to follow the last version of Debian Policy
(Standards-Version 4.5.0 instead of
4.4.0).
![[bug history graph]](https://qa.debian.org/data/bts/graphs/libe/libextractor.png){kind=link}