Debian Package Tracker

general

source: libpff (main)
version: 20180714-2
maintainer: Debian Security Tools (DMD)
uploaders: Pierre Chifflier [DMD]
arch: any
std-ver: 4.4.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 20120802-2
oldstable: 20120802-5
stable: 20180714-1
testing: 20180714-2
unstable: 20180714-2

versioned links

20120802-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
20120802-5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
20180714-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
20180714-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libpff-dev
libpff1
pff-tools
python3-pypff

action needed

Multiarch hinter reports 3 issue(s) normal

There are issues with the multiarch metadata for this package.

libpff-dev could be marked Multi-Arch: same
libpff1 could be marked Multi-Arch: same
python3-pypff could be marked Multi-Arch: same

Created: 2016-09-14 Last update: 2020-05-29 01:22

1 new commit since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit e60be1f0aa6fc80843de47bf8aa41370346720be
Author: Samuel Henrique <samueloph@debian.org>
Date:   Sun Feb 9 18:30:15 2020 +0000

    Configure git-buildpackage for Debian

Created: 2020-02-09 Last update: 2020-05-28 04:39

lintian reports 2 warnings normal

Lintian reports 2 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2020-05-21 Last update: 2020-05-21 00:05

2 ignored security issues in jessie low

There are 2 open security issues in jessie.

2 issues skipped by the security teams:

CVE-2018-20348: libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion) via a crafted file, related to libfdata_tree_get_node_value in libfdata_tree.c.
CVE-2018-11723: ** DISPUTED ** The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub.

Please fix them.

Created: 2018-06-20 Last update: 2020-03-27 18:00

2 ignored security issues in stretch low

There are 2 open security issues in stretch.

2 issues skipped by the security teams:

CVE-2018-20348: libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion) via a crafted file, related to libfdata_tree_get_node_value in libfdata_tree.c.
CVE-2018-11723: ** DISPUTED ** The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub.

Please fix them.

Created: 2018-06-20 Last update: 2020-03-27 18:00

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.5.0 instead of 4.4.1).

Created: 2018-02-04 Last update: 2020-01-27 00:37

news

[rss feed]

[2020-03-28] libpff 20180714-2 MIGRATED to testing (Debian testing watch)
[2020-01-26] Accepted libpff 20180714-2 (source amd64) into unstable, unstable (Aleksey Kravchenko) (signed by: Raphaël Hertzog)
[2019-01-07] libpff 20180714-1 MIGRATED to testing (Debian testing watch)
[2019-01-02] Accepted libpff 20180714-1 (source) into unstable (Aleksey Kravchenko) (signed by: Samuel Henrique)
[2018-02-09] libpff 20120802-5.1 MIGRATED to testing (Debian testing watch)
[2018-02-04] Accepted libpff 20120802-5.1 (source) into unstable (Aurelien Jarno)
[2015-07-10] libpff 20120802-5 MIGRATED to testing (Britney)
[2015-07-05] Accepted libpff 20120802-5 (source amd64) into unstable (Joao Eriberto Mota Filho)
[2015-06-26] libpff 20120802-4 MIGRATED to testing (Britney)
[2015-06-18] Accepted libpff 20120802-4 (source amd64) into unstable (Joao Eriberto Mota Filho)
[2015-04-02] Accepted libpff 20120802-3 (source amd64) into experimental (Joao Eriberto Mota Filho)
[2014-09-02] libpff 20120802-2 MIGRATED to testing (Britney)
[2014-08-28] Accepted libpff 20120802-2 (source amd64) into unstable (Pierre Chifflier)
[2013-05-29] libpff 20120802-1 MIGRATED to testing (Debian testing watch)
[2013-05-18] Accepted libpff 20120802-1 (source amd64) (Pierre Chifflier)

bugs [bug history graph]

all: 0

links

homepage
lintian (0, 2)
buildd: logs, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 20180714-2