action needed
A new upstream version is available: 0.5.32
high
A new upstream version 0.5.32 is available, you should consider packaging it.
1 security issue in buster
high
There is 1 open security issue in buster.
1 important issue:
- CVE-2019-17420: In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not alert on a response with a single \r\n ending.
Standards version of the package is outdated.
wishlist
The package should be updated to follow the last version of Debian Policy
(Standards-Version 4.4.1 instead of
4.4.0).
-
all:
1
-
RC:
0
-
I&N:
0
-
M&W:
1
-
F&P:
0
-
patch:
0
![[bug history graph]](https://qa.debian.org/data/bts/graphs/libh/libhtp.png){kind=link}