Debian Package Tracker

general

source: libfsntfs (main)
version: 20170315-2
maintainer: Debian Forensics (archive) [DMD]
uploaders: Hilko Bengen [DMD]
arch: any
std-ver: 4.1.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

stable: 20160418-1
testing: 20170315-2
unstable: 20170315-2

versioned links

20160418-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
20170315-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libfsntfs-dev
libfsntfs-utils
libfsntfs1
python-libfsntfs
python3-libfsntfs

action needed

5 security issues in sid high

There are 5 open security issues in sid.

5 important issues:

CVE-2018-11730: The libfsntfs_security_descriptor_values_free function in libfsntfs_security_descriptor_values.c in libfsntfs through 2018-04-20 allows remote attackers to cause a denial of service (double-free) via a crafted ntfs file.
CVE-2018-11731: The libfsntfs_mft_entry_read_attributes function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file.
CVE-2018-11729: The libfsntfs_mft_entry_read_header function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file.
CVE-2018-11727: The libfsntfs_attribute_read_from_mft function in libfsntfs_attribute.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file.
CVE-2018-11728: The libfsntfs_reparse_point_values_read_data function in libfsntfs_reparse_point_values.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file.

Please fix them.

Created: 2018-06-20 Last update: 2018-08-11 08:05

5 security issues in buster high

There are 5 open security issues in buster.

5 important issues:

CVE-2018-11730: The libfsntfs_security_descriptor_values_free function in libfsntfs_security_descriptor_values.c in libfsntfs through 2018-04-20 allows remote attackers to cause a denial of service (double-free) via a crafted ntfs file.
CVE-2018-11731: The libfsntfs_mft_entry_read_attributes function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file.
CVE-2018-11729: The libfsntfs_mft_entry_read_header function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file.
CVE-2018-11727: The libfsntfs_attribute_read_from_mft function in libfsntfs_attribute.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file.
CVE-2018-11728: The libfsntfs_reparse_point_values_read_data function in libfsntfs_reparse_point_values.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file.

Please fix them.

Created: 2018-06-20 Last update: 2018-08-11 08:05

lintian reports 2 errors and 6 warnings high

Lintian reports 2 errors and 6 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2017-10-19 Last update: 2018-04-14 07:50

Multiarch hinter reports 2 issue(s) normal

There are issues with the multiarch metadata for this package.

python-libfsntfs could be marked Multi-Arch: same
python3-libfsntfs could be marked Multi-Arch: same

Created: 2016-09-14 Last update: 2018-08-22 00:42

2 new commits since last upload, time to release an update? normal

vcswatch reports that this package seems to have new commits in its VCS. You should consider updating the debian/changelog and uploading this new version into the archive.

The Vcs URL is using anonscm.debian.org. Please update it for the move to salsa.debian.org.

Created: 2018-03-03 Last update: 2018-07-03 15:58

5 ignored security issues in stretch low

There are 5 open security issues in stretch.

5 issues skipped by the security teams:

CVE-2018-11730: The libfsntfs_security_descriptor_values_free function in libfsntfs_security_descriptor_values.c in libfsntfs through 2018-04-20 allows remote attackers to cause a denial of service (double-free) via a crafted ntfs file.
CVE-2018-11731: The libfsntfs_mft_entry_read_attributes function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file.
CVE-2018-11729: The libfsntfs_mft_entry_read_header function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file.
CVE-2018-11727: The libfsntfs_attribute_read_from_mft function in libfsntfs_attribute.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file.
CVE-2018-11728: The libfsntfs_reparse_point_values_read_data function in libfsntfs_reparse_point_values.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file.

Please fix them.

Created: 2018-06-20 Last update: 2018-08-11 08:05

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2017-10-26 Last update: 2017-10-26 07:22

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.2.0 instead of 4.1.1).

Created: 2018-04-16 Last update: 2018-08-21 12:14

news

[rss feed]

[2017-11-18] libfsntfs 20170315-2 MIGRATED to testing (Debian testing watch)
[2017-11-13] Accepted libfsntfs 20170315-2 (source) into unstable (Hilko Bengen)
[2017-06-20] libfsntfs 20170315-1 MIGRATED to testing (Debian testing watch)
[2017-03-15] Accepted libfsntfs 20170315-1 (source) into unstable (Hilko Bengen)
[2016-05-05] libfsntfs 20160418-1 MIGRATED to testing (Debian testing watch)
[2016-04-30] Accepted libfsntfs 20160418-1 (source amd64) into unstable (Hilko Bengen)
[2016-02-10] libfsntfs 20160108-2 MIGRATED to testing (Debian testing watch)
[2016-02-04] Accepted libfsntfs 20160108-2 (source) into unstable (Hilko Bengen)
[2016-01-25] Accepted libfsntfs 20160108-1 (source amd64) into unstable, unstable (Hilko Bengen)

bugs [bug history graph]

all: 0

links

homepage
lintian (2, 6)
buildd: logs, checks, clang, reproducibility
popcon
browse source code
edit tags
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 20170315-2