Debian Package Tracker

general

source: libpff (main)
version: 20120802-5.1
maintainer: Debian Forensics (archive) [DMD]
uploaders: Christophe Monniez [DMD] – Pierre Chifflier [DMD]
arch: any
std-ver: 3.9.6
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 20120802-2
stable: 20120802-5
testing: 20120802-5.1
unstable: 20120802-5.1

versioned links

20120802-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
20120802-5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
20120802-5.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libpff-dbg
libpff-dev
libpff1
pff-tools

action needed

lintian reports 12 warnings high

Lintian reports 12 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2015-03-08 Last update: 2018-09-08 07:36

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2018-11723: ** DISPUTED ** The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub.

Please fix it.

Created: 2018-06-20 Last update: 2018-09-02 08:44

1 security issue in buster high

There is 1 open security issue in buster.

1 important issue:

CVE-2018-11723: ** DISPUTED ** The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub.

Please fix it.

Created: 2018-06-20 Last update: 2018-09-02 08:44

Standards version of the package is outdated. high

The package is severely out of date with respect to the Debian Policy. The package should be updated to follow the last version of Debian Policy (Standards-Version 4.2.1 instead of 3.9.6).

Created: 2018-02-04 Last update: 2018-08-26 08:17

Multiarch hinter reports 3 issue(s) normal

There are issues with the multiarch metadata for this package.

libpff-dbg could be marked Multi-Arch: same
libpff-dev could be marked Multi-Arch: same
libpff1 could be marked Multi-Arch: same

Created: 2016-09-14 Last update: 2018-11-19 07:21

30 new commits since last upload, time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 20180714-1, distribution unstable) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 16b7f7847c5a696ac72c933cf7386313cf553c68
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Mon Nov 12 01:23:43 2018 +0300

    override manpage-has-errors-from-man warning

commit 0eae2afdb646fb09299da9e4044137c01dcc4a32
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Sat Nov 10 13:26:54 2018 +0300

    changelog: select unstable distro

commit 25f274f597545a5d162fc44dcd855d93d482f725
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Sat Nov 10 13:25:16 2018 +0300

    changelog entry for changed Uploaders field

commit 251c839b9e8f65e96a586a1ca37bc14cb54cb5f6
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Sat Nov 10 12:21:33 2018 +0300

    apply wrap-and-sort

commit e8c90d58f7b297923d2b5c5fa231eec6ced5b35f
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Sat Nov 10 12:09:08 2018 +0300

    CVE-2018-11723 is fixed in libpff 20180714.
    
    The actual bug (buffer overflow) beneeth CVE-2018-11723 is fixed
    as Issue #64 https://github.com/libyal/libpff/issues/64 .
    The fix is included into libpff version 20180714.

commit 302d53a4a70a24f004d491d7e7a52f95a73100fa
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Thu Nov 8 08:40:51 2018 +0300

    fix lintian and man warnings for the libpff.3 manpage

commit d9884fc7a33c9e77f3b45eb373aca3cca7bb0caf
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Thu Nov 8 08:32:19 2018 +0300

    fix man warnings for two manpages

commit 58e8ab20bfda6e6424d12da16ca92897bedd53ca
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Thu Nov 8 08:22:02 2018 +0300

    override spelling-error-in-binary lintian warning

commit a9b7a016ff6308310529d7e5fd96ffd3374e6661
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Thu Nov 8 07:35:10 2018 +0300

    fix spelling errors in the pffexport binary

commit 20cf12dcc51ea06bed569335851afd1ad375ba31
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Wed Nov 7 02:34:26 2018 +0300

    fix building twice with debuild command

commit 45f133eb4bd275951da28f468427f0f212b71a41
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Wed Nov 7 02:18:03 2018 +0300

    fix build in a fresh jail

commit 0b277c066f7805a46966da25190a9ddd58a66b03
Author: Raphaël Hertzog <hertzog@debian.org>
Date:   Thu Nov 8 15:24:19 2018 +0100

    Drop Christophe Monniez from Uploaders
    
    He's no longer contributing to the team.

commit e857dbc0373eb3521f638b2cb5d5b6c00535bc33
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Mon Oct 29 03:00:15 2018 +0300

    update short description of pff-tools

commit 0774daaa6542389820c29b3abffa1a03ae5bc64d
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Sun Oct 28 17:57:55 2018 +0300

    clean up debian/rules

commit d5e8cb92f3429c17b3fa865f9af6407f80c8d8b8
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Sun Oct 28 13:10:56 2018 +0300

    clean up copyright file

commit fe2292d35c4f6c6a3237352e7fd5d453edc7030f
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Sun Oct 28 12:25:59 2018 +0300

    add metadata about upstream

commit af9dbe85985fa320da5ca9f01953fe3bf105508b
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Sun Oct 28 07:37:12 2018 +0300

    migrate to automatic debug package

commit 362b94fe9d93df7516d647099512065b1b14325e
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Sun Oct 28 07:20:13 2018 +0300

    remove deprecated dependency on dh-autoreconf

commit 52ae5e5772edddf6a333404baf8d65224d4d19e8
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Sun Oct 28 02:59:04 2018 +0300

    recreate libpff1.symbols, since ABI is broken

commit 880998561e3d56c49e928cbecc9f91548d445ef8
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Sun Oct 28 02:57:05 2018 +0300

    drop obsolete patches

commit 22de4d115ee58758df89806d2678c306f798d0e5
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Sat Oct 27 11:53:46 2018 +0300

    changelog entry for v20180714

commit f3a5e098b94be49df80b03af160ec63b78968f70
Merge: 0d9f792 1a9ccaa
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Sun Oct 28 03:44:43 2018 +0300

    Update upstream source from tag 'upstream/20180714'
    
    Update to upstream version '20180714'
    with Debian dir 24ba0d899f3a3080ae9f0d9b8d5464438016094f

commit 1a9ccaa4a78b2e656400f33f9c58925ec465df9d
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Sun Oct 28 03:44:32 2018 +0300

    New upstream version 20180714

commit 0d9f792c150f050b8c47b7de484e55374b5edff9
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Thu Oct 25 10:33:44 2018 +0300

    Switch copyright url to https

commit 7e1ece83dd8e1153c379717b77bf8cbb164b542b
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Thu Oct 25 10:01:31 2018 +0300

    Bump std-version and debhelper-compat level

commit ef89d1543e1fee2ed97d2108b3c796ce4f3fb37e
Merge: 45ca948 e236a20
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Thu Oct 25 09:53:16 2018 +0300

    Merge version 20120802-5.1 into debian/master

commit 45ca948cd7916a4f726adf2445eddb5959916f51
Author: Raphaël Hertzog <hertzog@debian.org>
Date:   Fri Mar 2 12:53:55 2018 +0100

    Update Vcs-Git and Vcs-Browser for the move to salsa.debian.org

commit 2a363ab32a08144f8e8e181c3b40871dfa5065f1
Author: Raphaël Hertzog <hertzog@debian.org>
Date:   Fri Mar 2 12:34:56 2018 +0100

    Update team maintainer address to Debian Security Tools <team+pkg-security@tracker.debian.org>

commit e236a20875f6aabad6db0fb564130e8a9d695028
Author: Aleksey Kravchenko <rhash.admin@gmail.com>
Date:   Wed Feb 28 23:49:08 2018 +0300

    Imported Debian patch 20120802-5.1

The Vcs URL git://anonscm.debian.org/forensics/libpff.git is deprecated/defunct, https://anonscm.debian.org/git/forensics/libpff.git was tried instead. Please update the Vcs field in debian/control.

Created: 2018-02-04 Last update: 2018-11-18 19:47

The URL(s) for this package had some recent persistent issues low

DUCK reports some issues concerning upstream URLs defined for this package.

Created: 2018-09-07 Last update: 2018-11-19 10:38

1 ignored security issue in jessie low

There is 1 open security issue in jessie.

1 issue skipped by the security teams:

CVE-2018-11723: ** DISPUTED ** The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub.

Please fix it.

Created: 2018-06-20 Last update: 2018-09-02 08:44

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2018-11723: ** DISPUTED ** The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub.

Please fix it.

Created: 2018-06-20 Last update: 2018-09-02 08:44

news

[rss feed]

[2018-02-09] libpff 20120802-5.1 MIGRATED to testing (Debian testing watch)
[2018-02-04] Accepted libpff 20120802-5.1 (source) into unstable (Aurelien Jarno)
[2015-07-10] libpff 20120802-5 MIGRATED to testing (Britney)
[2015-07-05] Accepted libpff 20120802-5 (source amd64) into unstable (Joao Eriberto Mota Filho)
[2015-06-26] libpff 20120802-4 MIGRATED to testing (Britney)
[2015-06-18] Accepted libpff 20120802-4 (source amd64) into unstable (Joao Eriberto Mota Filho)
[2015-04-02] Accepted libpff 20120802-3 (source amd64) into experimental (Joao Eriberto Mota Filho)
[2014-09-02] libpff 20120802-2 MIGRATED to testing (Britney)
[2014-08-28] Accepted libpff 20120802-2 (source amd64) into unstable (Pierre Chifflier)
[2013-05-29] libpff 20120802-1 MIGRATED to testing (Debian testing watch)
[2013-05-18] Accepted libpff 20120802-1 (source amd64) (Pierre Chifflier)

bugs [bug history graph]

all: 2
RC: 0
I&N: 1
M&W: 1
F&P: 0
patch: 0

links

homepage
lintian (0, 12)
buildd: logs, clang, reproducibility
popcon
browse source code
edit tags
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 20120802-5.1