Debian Package Tracker

general

source: libfsntfs (main)
version: 20170315-2
maintainer: Debian Forensics (archive) [DMD]
uploaders: Hilko Bengen [DMD]
arch: any
std-ver: 4.1.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

stable: 20160418-1
testing: 20170315-2
unstable: 20170315-2

versioned links

20160418-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
20170315-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libfsntfs-dev
libfsntfs-utils
libfsntfs1
python-libfsntfs
python3-libfsntfs

action needed

lintian reports 2 errors and 6 warnings high

Lintian reports 2 errors and 6 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2017-10-19 Last update: 2018-09-10 05:06

5 security issues in sid high

There are 5 open security issues in sid.

5 important issues:

CVE-2018-11730: ** DISPUTED ** The libfsntfs_security_descriptor_values_free function in libfsntfs_security_descriptor_values.c in libfsntfs through 2018-04-20 allows remote attackers to cause a denial of service (double-free) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub.
CVE-2018-11731: ** DISPUTED ** The libfsntfs_mft_entry_read_attributes function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub.
CVE-2018-11728: ** DISPUTED ** The libfsntfs_reparse_point_values_read_data function in libfsntfs_reparse_point_values.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub.
CVE-2018-11727: ** DISPUTED ** The libfsntfs_attribute_read_from_mft function in libfsntfs_attribute.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub.
CVE-2018-11729: ** DISPUTED ** The libfsntfs_mft_entry_read_header function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub.

Please fix them.

Created: 2018-06-20 Last update: 2018-09-02 08:44

5 security issues in buster high

There are 5 open security issues in buster.

5 important issues:

CVE-2018-11730: ** DISPUTED ** The libfsntfs_security_descriptor_values_free function in libfsntfs_security_descriptor_values.c in libfsntfs through 2018-04-20 allows remote attackers to cause a denial of service (double-free) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub.
CVE-2018-11731: ** DISPUTED ** The libfsntfs_mft_entry_read_attributes function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub.
CVE-2018-11728: ** DISPUTED ** The libfsntfs_reparse_point_values_read_data function in libfsntfs_reparse_point_values.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub.
CVE-2018-11727: ** DISPUTED ** The libfsntfs_attribute_read_from_mft function in libfsntfs_attribute.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub.
CVE-2018-11729: ** DISPUTED ** The libfsntfs_mft_entry_read_header function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub.

Please fix them.

Created: 2018-06-20 Last update: 2018-09-02 08:44

Multiarch hinter reports 2 issue(s) normal

There are issues with the multiarch metadata for this package.

python-libfsntfs could be marked Multi-Arch: same
python3-libfsntfs could be marked Multi-Arch: same

Created: 2016-09-14 Last update: 2018-11-18 08:38

2 new commits since last upload, time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit a08169cc4dc78858bf77d8aa77dca21f626057b2
Author: Raphaël Hertzog <hertzog@debian.org>
Date:   Fri Mar 2 12:53:55 2018 +0100

    Update Vcs-Git and Vcs-Browser for the move to salsa.debian.org

commit 38d4fd77a61c16c26069f3f3e1d92f755ac448de
Author: Raphaël Hertzog <hertzog@debian.org>
Date:   Fri Mar 2 12:34:56 2018 +0100

    Update team maintainer address to Debian Security Tools <team+pkg-security@tracker.debian.org>

The Vcs URL is using anonscm.debian.org. Please update it for the move to salsa.debian.org.

Created: 2018-03-03 Last update: 2018-11-18 03:37

5 ignored security issues in stretch low

There are 5 open security issues in stretch.

5 issues skipped by the security teams:

CVE-2018-11730: ** DISPUTED ** The libfsntfs_security_descriptor_values_free function in libfsntfs_security_descriptor_values.c in libfsntfs through 2018-04-20 allows remote attackers to cause a denial of service (double-free) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub.
CVE-2018-11731: ** DISPUTED ** The libfsntfs_mft_entry_read_attributes function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub.
CVE-2018-11728: ** DISPUTED ** The libfsntfs_reparse_point_values_read_data function in libfsntfs_reparse_point_values.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub.
CVE-2018-11727: ** DISPUTED ** The libfsntfs_attribute_read_from_mft function in libfsntfs_attribute.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub.
CVE-2018-11729: ** DISPUTED ** The libfsntfs_mft_entry_read_header function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub.

Please fix them.

Created: 2018-06-20 Last update: 2018-09-02 08:44

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2017-10-26 Last update: 2017-10-26 07:22

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.2.1 instead of 4.1.1).

Created: 2018-04-16 Last update: 2018-08-26 08:16

news

[rss feed]

[2017-11-18] libfsntfs 20170315-2 MIGRATED to testing (Debian testing watch)
[2017-11-13] Accepted libfsntfs 20170315-2 (source) into unstable (Hilko Bengen)
[2017-06-20] libfsntfs 20170315-1 MIGRATED to testing (Debian testing watch)
[2017-03-15] Accepted libfsntfs 20170315-1 (source) into unstable (Hilko Bengen)
[2016-05-05] libfsntfs 20160418-1 MIGRATED to testing (Debian testing watch)
[2016-04-30] Accepted libfsntfs 20160418-1 (source amd64) into unstable (Hilko Bengen)
[2016-02-10] libfsntfs 20160108-2 MIGRATED to testing (Debian testing watch)
[2016-02-04] Accepted libfsntfs 20160108-2 (source) into unstable (Hilko Bengen)
[2016-01-25] Accepted libfsntfs 20160108-1 (source amd64) into unstable, unstable (Hilko Bengen)

bugs [bug history graph]

all: 0

links

homepage
lintian (2, 6)
buildd: logs, checks, clang, reproducibility
popcon
browse source code
edit tags
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 20170315-2build1