Debian Package Tracker

general

source: radare2 (source, devel)
version: 1.1.0+dfsg-5
maintainer: Sebastian Reichel [DMD]
arch: all any
std-ver: 3.9.8
VCS: Git (Browse)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.9-3
o-o-sec: 0.9-3+deb7u3
oldstable: 0.9.6-3.1+deb8u1
stable: 1.1.0+dfsg-5
testing: 1.1.0+dfsg-5
unstable: 1.1.0+dfsg-5
exp: 1.5.0+dfsg-1
NEW/unstable: 1.6.0+dfsg-1

versioned links

0.9-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.9-3+deb7u3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.9.6-3.1+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.1.0+dfsg-5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.5.0+dfsg-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libradare2-1.1
libradare2-common
libradare2-dev
radare2

action needed

A new upstream version is available: 1.6.0

high

A new upstream version 1.6.0 is available, you should consider packaging it.

Created: 2017-08-12 Last update: 2017-08-16 13:22

6 security issues in sid

high

There are 6 open security issues in sid.

6 important issues:

CVE-2017-9763: The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service (excessive stack use and application crash) via a crafted binary file, related to use of a variable-size stack array.
CVE-2017-9762: The cmd_info function in libr/core/cmd_info.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted binary file.
CVE-2017-9761: The find_eoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.
CVE-2017-10929: The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, possibly related to a read overflow in the grub_disk_read_small_real function in kern/disk.c in GNU GRUB 2.02.
CVE-2017-9520: The r_config_set function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted DEX file.
CVE-2017-9949: The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (stack-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted binary file, possibly related to a buffer underflow in fs/ext2.c in GNU GRUB 2.02.

Please fix them.

Created: 2017-06-09 Last update: 2017-08-11 01:20

6 security issues in buster

high

There are 6 open security issues in buster.

6 important issues:

CVE-2017-9763: The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service (excessive stack use and application crash) via a crafted binary file, related to use of a variable-size stack array.
CVE-2017-9762: The cmd_info function in libr/core/cmd_info.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted binary file.
CVE-2017-9761: The find_eoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.
CVE-2017-10929: The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, possibly related to a read overflow in the grub_disk_read_small_real function in kern/disk.c in GNU GRUB 2.02.
CVE-2017-9520: The r_config_set function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted DEX file.
CVE-2017-9949: The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (stack-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted binary file, possibly related to a buffer underflow in fs/ext2.c in GNU GRUB 2.02.

Please fix them.

Created: 2017-06-18 Last update: 2017-08-11 01:20

Standards version of the package is outdated.

high

The package is severely out of date with respect to the Debian Policy. The package should be updated to follow the last version of Debian Policy (Standards-Version 4.0.0 instead of 3.9.8).

Created: 2017-07-07 Last update: 2017-07-07 01:02

lintian reports 6 errors and 5 warnings

high

Lintian reports 6 errors and 5 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2017-03-16 Last update: 2017-06-24 07:23

3 bugs tagged patch in the BTS

normal

The BTS contains patches fixing 3 bugs, consider including or untagging them.

Created: 2017-08-12 Last update: 2017-08-16 13:08

7 ignored security issues in wheezy

low

There are 7 open security issues in wheezy.

7 issues skipped by the security teams:

CVE-2015-2305: Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular expression that leads to a heap-based buffer overflow.
CVE-2017-9763: The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service (excessive stack use and application crash) via a crafted binary file, related to use of a variable-size stack array.
CVE-2017-9762: The cmd_info function in libr/core/cmd_info.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted binary file.
CVE-2017-9761: The find_eoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.
CVE-2017-9520: The r_config_set function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted DEX file.
CVE-2017-7946: The get_relocs_64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted Mach0 file.
CVE-2017-9949: The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (stack-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted binary file, possibly related to a buffer underflow in fs/ext2.c in GNU GRUB 2.02.

Please fix them.

Created: 2015-07-12 Last update: 2017-08-11 01:20

10 ignored security issues in jessie

low

There are 10 open security issues in jessie.

10 issues skipped by the security teams:

CVE-2015-2305: Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular expression that leads to a heap-based buffer overflow.
CVE-2017-9763: The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service (excessive stack use and application crash) via a crafted binary file, related to use of a variable-size stack array.
CVE-2017-9762: The cmd_info function in libr/core/cmd_info.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted binary file.
CVE-2017-6197: The r_read_* functions in libr/include/r_endian.h in radare2 1.2.1 allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted binary file, as demonstrated by the r_read_le32 function.
CVE-2017-10929: The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, possibly related to a read overflow in the grub_disk_read_small_real function in kern/disk.c in GNU GRUB 2.02.
CVE-2017-9520: The r_config_set function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted DEX file.
CVE-2017-6448: The dalvik_disassemble function in libr/asm/p/asm_dalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted DEX file.
CVE-2017-9761: The find_eoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.
CVE-2017-7946: The get_relocs_64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted Mach0 file.
CVE-2017-9949: The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (stack-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted binary file, possibly related to a buffer underflow in fs/ext2.c in GNU GRUB 2.02.

Please fix them.

Created: 2015-07-12 Last update: 2017-08-11 01:20

6 ignored security issues in stretch

low

There are 6 open security issues in stretch.

6 issues skipped by the security teams:

CVE-2017-9763: The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service (excessive stack use and application crash) via a crafted binary file, related to use of a variable-size stack array.
CVE-2017-9762: The cmd_info function in libr/core/cmd_info.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted binary file.
CVE-2017-9761: The find_eoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.
CVE-2017-10929: The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, possibly related to a read overflow in the grub_disk_read_small_real function in kern/disk.c in GNU GRUB 2.02.
CVE-2017-9520: The r_config_set function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted DEX file.
CVE-2017-9949: The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (stack-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted binary file, possibly related to a buffer underflow in fs/ext2.c in GNU GRUB 2.02.

Please fix them.

Created: 2017-06-09 Last update: 2017-08-11 01:20

Build log checks report 2 warnings

low

Build log checks report 2 warnings

Created: 2014-07-02 Last update: 2017-03-03 13:12

news

[rss feed]

[2017-07-06] Accepted radare2 0.9-3+deb7u3 (source amd64) into oldoldstable (Chris Lamb)
[2017-06-06] Accepted radare2 1.5.0+dfsg-1 (source amd64 all) into experimental, experimental (Sebastian Reichel)
[2017-04-30] radare2 1.1.0+dfsg-5 MIGRATED to testing (Debian testing watch)
[2017-04-25] Accepted radare2 1.4.0+dfsg-1 (source amd64 all) into experimental, experimental (Sebastian Reichel)
[2017-04-23] Accepted radare2 1.1.0+dfsg-5 (source amd64 all) into unstable (Sebastian Reichel)
[2017-04-17] Accepted radare2 0.9-3+deb7u2 (source amd64) into oldstable (Thorsten Alteholz)
[2017-04-14] radare2 1.1.0+dfsg-4 MIGRATED to testing (Debian testing watch)
[2017-04-11] Accepted radare2 1.1.0+dfsg-4 (source amd64 all) into unstable (Sebastian Reichel)
[2017-03-28] Accepted radare2 1.3.0+dfsg-2 (source amd64 all) into experimental (Sebastian Reichel)
[2017-03-15] Accepted radare2 1.3.0+dfsg-1 (source amd64 all) into experimental, experimental (Sebastian Reichel)
[2017-03-09] Accepted radare2 0.9.6-3.1+deb8u1 (source amd64 all) into proposed-updates->stable-new, proposed-updates (Sebastian Reichel)
[2017-03-05] radare2 1.1.0+dfsg-3 MIGRATED to testing (Debian testing watch)
[2017-03-03] Accepted radare2 1.2.1+dfsg-5 (source amd64 all) into experimental (Sebastian Reichel)
[2017-03-03] Accepted radare2 1.1.0+dfsg-3 (source amd64 all) into unstable (Sebastian Reichel)
[2017-02-27] radare2 1.1.0+dfsg-2 MIGRATED to testing (Debian testing watch)
[2017-02-26] Accepted radare2 0.9-3+deb7u1 (source amd64) into oldstable (Thorsten Alteholz)
[2017-02-25] Accepted radare2 1.2.1+dfsg-4 (source amd64 all) into experimental (Sebastian Reichel)
[2017-02-25] Accepted radare2 1.1.0+dfsg-2 (source amd64 all) into unstable (Sebastian Reichel)
[2017-02-09] Accepted radare2 1.2.1+dfsg-3 (source amd64 all) into experimental (Sebastian Reichel)
[2017-02-06] Accepted radare2 1.2.1+dfsg-2 (source amd64 all) into experimental (Sebastian Reichel)
[2017-02-05] Accepted radare2 1.2.1+dfsg-1 (source amd64 all) into experimental (Sebastian Reichel)
[2017-02-01] Accepted radare2 1.2.0+dfsg-1 (source amd64 all) into experimental, experimental (Sebastian Reichel)
[2017-01-01] radare2 1.1.0+dfsg-1 MIGRATED to testing (Debian testing watch)
[2016-12-21] Accepted radare2 1.1.0+dfsg-1 (source amd64 all) into unstable, unstable (Sebastian Reichel)
[2016-11-17] radare2 1.0.2+dfsg-1 MIGRATED to testing (Debian testing watch)
[2016-11-11] Accepted radare2 1.0.2+dfsg-1 (source amd64 all) into unstable (Sebastian Reichel)
[2016-11-10] Accepted radare2 1.0+dfsg-1 (source amd64 all) into unstable, unstable (Sebastian Reichel)
[2016-10-03] radare2 0.10.6+dfsg-1 MIGRATED to testing (Debian testing watch)
[2016-09-27] Accepted radare2 0.10.6+dfsg-1 (source amd64 all) into unstable, unstable (Sebastian Reichel)
[2016-09-07] radare2 0.10.5+dfsg1-1 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 7
RC: 1
I&N: 6
M&W: 0
F&P: 0

links

homepage
lintian (6, 5)
buildd: logs, checks, clang, reproducibility
popcon
browse source code
edit tags
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.1.0+dfsg-5
1 bug