sleuthkit - Debian Package Tracker

general

source: sleuthkit (main)
version: 4.10.1+dfsg-1
maintainer: Debian Security Tools (DMD)
arch: any
std-ver: 4.5.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 4.4.0-5
stable: 4.6.5-1+deb10u1
testing: 4.10.1+dfsg-1
unstable: 4.10.1+dfsg-1

versioned links

4.4.0-5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.6.5-1+deb10u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.10.1+dfsg-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libtsk-dev
libtsk19
sleuthkit

action needed

Problems while searching for a new upstream version high

uscan had problems while searching for a new upstream version:

In debian/watch no matching files for watch line
  https://github.com/sleuthkit/sleuthkit/releases .*/sleuthkit/archive/sleuthkit-(\d\S+)\.tar\.(?:bz2|gz|xz)

Created: 2021-03-22 Last update: 2021-04-14 03:02

4 security issues in sid high

There are 4 open security issues in sid.

4 important issues:

CVE-2018-11737: An issue was discovered in libtskfs.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function ntfs_fix_idxrec in tsk/fs/ntfs_dent.cpp which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service.
CVE-2018-11738: An issue was discovered in libtskfs.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function ntfs_make_data_run in tsk/fs/ntfs.c which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service attack.
CVE-2018-11739: An issue was discovered in libtskimg.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function raw_read in tsk/img/raw.c which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service attack.
CVE-2018-11740: An issue was discovered in libtskbase.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function tsk_UTF16toUTF8 in tsk/base/tsk_unicode.c which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service attack.

Created: 2021-02-19 Last update: 2021-03-21 19:04

Depends on packages which need a new maintainer normal

The packages that sleuthkit depends on which need a new maintainer are:

autopsy (#832370)
- Suggests: autopsy

Created: 2019-11-22 Last update: 2021-04-14 07:01

1 new commit since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 63bc7516483ff2cf666d536b8f4724d2ab6bd53a
Author: Francisco Vilmar Cardoso Ruviaro <francisco.ruviaro@riseup.net>
Date:   Sun Mar 28 20:52:06 2021 +0000

    Update debian/watch

Created: 2021-03-28 Last update: 2021-04-12 01:04

lintian reports 1 warning normal

Lintian reports 1 warning about this package. You should make the package lintian clean getting rid of them.

Created: 2021-01-27 Last update: 2021-01-27 03:05

No known security issue in buster wishlist

There are 4 open security issues in buster.

4 ignored issues:

CVE-2018-11737: An issue was discovered in libtskfs.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function ntfs_fix_idxrec in tsk/fs/ntfs_dent.cpp which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service.
CVE-2018-11738: An issue was discovered in libtskfs.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function ntfs_make_data_run in tsk/fs/ntfs.c which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service attack.
CVE-2018-11739: An issue was discovered in libtskimg.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function raw_read in tsk/img/raw.c which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service attack.
CVE-2018-11740: An issue was discovered in libtskbase.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function tsk_UTF16toUTF8 in tsk/base/tsk_unicode.c which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service attack.

Created: 2021-02-19 Last update: 2021-03-21 19:04

testing migrations

This package will soon be part of the auto-libewf transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.

news

[rss feed]

[2020-12-26] sleuthkit 4.10.1+dfsg-1 MIGRATED to testing (Debian testing watch)
[2020-12-20] Accepted sleuthkit 4.10.1+dfsg-1 (source) into unstable (Francisco Vilmar Cardoso Ruviaro) (signed by: Raphaël Hertzog)
[2020-10-16] Accepted sleuthkit 4.6.5-1+deb10u1 (source) into proposed-updates->stable-new, proposed-updates (Debian FTP Masters) (signed by: Samuel Henrique)
[2020-10-14] sleuthkit 4.10.0+dfsg-1 MIGRATED to testing (Debian testing watch)
[2020-10-08] Accepted sleuthkit 4.10.0+dfsg-1 (source) into unstable (Francisco Vilmar Cardoso Ruviaro) (signed by: Samuel Henrique)
[2020-09-03] sleuthkit 4.9.0+dfsg-2 MIGRATED to testing (Debian testing watch)
[2020-08-28] Accepted sleuthkit 4.9.0+dfsg-2 (source) into unstable (Francisco Vilmar Cardoso Ruviaro) (signed by: Samuel Henrique)
[2020-08-04] Accepted sleuthkit 4.9.0+dfsg-1 (source amd64) into experimental, experimental (Debian FTP Masters) (signed by: Samuel Henrique)
[2020-03-09] Accepted sleuthkit 4.1.3-4+deb8u2 (source amd64) into oldoldstable (Utkarsh Gupta)
[2019-09-21] sleuthkit 4.6.7-1 MIGRATED to testing (Debian testing watch)
[2019-09-16] Accepted sleuthkit 4.6.7-1 (source) into unstable (Hilko Bengen)
[2019-01-27] sleuthkit 4.6.5-1 MIGRATED to testing (Debian testing watch)
[2019-01-22] Accepted sleuthkit 4.6.5-1 (source) into unstable (Hilko Bengen)
[2019-01-16] sleuthkit 4.6.4-2 MIGRATED to testing (Debian testing watch)
[2019-01-13] Accepted sleuthkit 4.6.4-2 (source) into unstable (Hilko Bengen)
[2018-12-30] sleuthkit 4.6.4-1 MIGRATED to testing (Debian testing watch)
[2018-12-24] Accepted sleuthkit 4.6.4-1 (source) into unstable (Hilko Bengen)
[2018-12-17] Accepted sleuthkit 4.1.3-4+deb8u1 (source amd64) into oldstable (Hugo Lefeuvre)
[2018-08-17] sleuthkit 4.6.2-1 MIGRATED to testing (Debian testing watch)
[2018-08-12] Accepted sleuthkit 4.6.2-1 (source) into unstable (Hilko Bengen)
[2018-08-11] sleuthkit 4.6.1-1 MIGRATED to testing (Debian testing watch)
[2018-08-05] Accepted sleuthkit 4.6.1-1 (source) into unstable (Hilko Bengen)
[2018-04-06] sleuthkit 4.6.0-1 MIGRATED to testing (Debian testing watch)
[2018-03-31] Accepted sleuthkit 4.6.0-1 (source) into unstable (Hilko Bengen)
[2017-09-25] sleuthkit 4.4.2-3 MIGRATED to testing (Debian testing watch)
[2017-09-19] Accepted sleuthkit 4.4.2-3 (source) into unstable (Joao Eriberto Mota Filho)
[2017-09-19] Accepted sleuthkit 4.4.2-2 (source) into experimental (Joao Eriberto Mota Filho)
[2017-08-20] sleuthkit 4.4.2-1 MIGRATED to testing (Debian testing watch)
[2017-08-14] Accepted sleuthkit 4.4.2-1 (source) into unstable (Hilko Bengen)
[2017-08-14] sleuthkit 4.4.0-6 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 1
RC: 0
I&N: 1
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (0, 1)
buildd: logs, clang, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 4.10.1+dfsg-1