Debian Package Tracker

general

source: yara (main)
version: 3.7.1-2
maintainer: Debian Forensics (archive) [DMD]
uploaders: Hilko Bengen [DMD]
arch: all any
std-ver: 4.1.3
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-bpo: 3.1.0-2~bpo70+1
oldstable: 3.1.0-2+deb8u1
old-bpo: 3.5.0+dfsg-9~bpo8+1
stable: 3.5.0+dfsg-9
stable-bpo: 3.7.0-5~bpo9+1
testing: 3.7.1-2
unstable: 3.7.1-2

versioned links

3.1.0-2~bpo70+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.1.0-2+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.5.0+dfsg-9~bpo8+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.5.0+dfsg-9: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.7.0-5~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.7.1-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libyara-dev
libyara3
yara
yara-doc

action needed

2 new commits since last upload, time to release an update? normal

vcswatch reports that this package seems to have new commits in its VCS. You should consider updating the debian/changelog and uploading this new version into the archive.

Created: 2018-03-03 Last update: 2018-05-24 02:47

lintian reports 3 warnings normal

Lintian reports 3 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2017-07-25 Last update: 2018-04-15 08:00

Multiarch hinter reports 1 issue(s) low

There are issues with the multiarch metadata for this package.

yara-doc could be marked Multi-Arch: foreign

Created: 2016-09-14 Last update: 2018-05-27 02:10

6 ignored security issues in jessie low

There are 6 open security issues in jessie.

6 issues skipped by the security teams:

CVE-2017-8294: libyara/re.c in the regex component in YARA 3.5.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted rule that is mishandled in the yr_re_exec function.
CVE-2017-9438: libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of service (stack consumption) via a crafted rule (involving hex strings) that is mishandled in the _yr_re_emit function, a different vulnerability than CVE-2017-9304.
CVE-2017-9465: The yr_arena_write_data function in YARA 3.6.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) or obtain sensitive information from process memory via a crafted file that is mishandled in the yr_re_fast_exec function in libyara/re.c and the _yr_scan_match_callback function in libyara/scan.c.
CVE-2017-9304: libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of service (stack consumption) via a crafted rule that is mishandled in the _yr_re_emit function.
CVE-2017-11328: Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attack by scanning a crafted .NET file.
CVE-2017-8929: The sized_string_cmp function in libyara/sizedstr.c in YARA 3.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted rule.

Please fix them.

Created: 2017-04-03 Last update: 2018-02-19 08:12

6 ignored security issues in stretch low

There are 6 open security issues in stretch.

6 issues skipped by the security teams:

CVE-2017-8294: libyara/re.c in the regex component in YARA 3.5.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted rule that is mishandled in the yr_re_exec function.
CVE-2017-9438: libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of service (stack consumption) via a crafted rule (involving hex strings) that is mishandled in the _yr_re_emit function, a different vulnerability than CVE-2017-9304.
CVE-2017-9465: The yr_arena_write_data function in YARA 3.6.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) or obtain sensitive information from process memory via a crafted file that is mishandled in the yr_re_fast_exec function in libyara/re.c and the _yr_scan_match_callback function in libyara/scan.c.
CVE-2017-9304: libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of service (stack consumption) via a crafted rule that is mishandled in the _yr_re_emit function.
CVE-2017-11328: Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attack by scanning a crafted .NET file.
CVE-2017-8929: The sized_string_cmp function in libyara/sizedstr.c in YARA 3.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted rule.

Please fix them.

Created: 2017-04-28 Last update: 2018-02-19 08:12

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2017-11-12 Last update: 2017-11-12 01:29

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.1.4 instead of 4.1.3).

Created: 2018-04-16 Last update: 2018-04-16 20:53

news

[rss feed]

[2018-02-19] yara 3.7.1-2 MIGRATED to testing (Debian testing watch)
[2018-02-13] Accepted yara 3.7.1-2 (source) into unstable (Hilko Bengen)
[2018-01-21] yara 3.7.1-1 MIGRATED to testing (Debian testing watch)
[2018-01-16] Accepted yara 3.7.1-1 (source) into unstable (Hilko Bengen)
[2017-12-08] Accepted yara 3.7.0-5~bpo9+1 (source amd64 all) into stretch-backports, stretch-backports (Hilko Bengen)
[2017-11-30] yara 3.7.0-5 MIGRATED to testing (Debian testing watch)
[2017-11-24] Accepted yara 3.7.0-5 (source) into unstable (Hilko Bengen)
[2017-11-20] Accepted yara 3.7.0-4 (source) into unstable (Hilko Bengen)
[2017-11-17] yara 3.7.0-3 MIGRATED to testing (Debian testing watch)
[2017-11-11] Accepted yara 3.7.0-3 (source) into unstable (Hilko Bengen)
[2017-11-10] Accepted yara 3.7.0-2 (source) into unstable (Hilko Bengen)
[2017-11-10] Accepted yara 3.7.0-1 (source) into unstable (Hilko Bengen)
[2017-07-12] yara 3.6.3+dfsg-1 MIGRATED to testing (Debian testing watch)
[2017-07-06] Accepted yara 3.6.3+dfsg-1 (source) into unstable (Hilko Bengen)
[2017-07-06] yara 3.6.2+dfsg-4 MIGRATED to testing (Debian testing watch)
[2017-07-01] Accepted yara 3.6.2+dfsg-4 (source) into unstable (Hilko Bengen)
[2017-06-30] Accepted yara 3.6.2+dfsg-3 (source) into unstable (Hilko Bengen)
[2017-06-30] Accepted yara 3.6.2+dfsg-2 (source) into unstable (Hilko Bengen)
[2017-06-30] Accepted yara 3.6.2+dfsg-1 (source) into unstable (Hilko Bengen)
[2017-06-29] yara 3.6.1+dfsg-1 MIGRATED to testing (Debian testing watch)
[2017-06-23] Accepted yara 3.6.1+dfsg-1 (source) into unstable (Hilko Bengen)
[2017-06-20] yara 3.6.0+dfsg-1 MIGRATED to testing (Debian testing watch)
[2017-05-22] Accepted yara 3.6.0+dfsg-1 (source) into unstable (Hilko Bengen)
[2017-04-25] Accepted yara 3.1.0-2+deb8u1 (source amd64) into proposed-updates->stable-new, proposed-updates (Hilko Bengen)
[2017-04-11] yara 3.5.0+dfsg-9 MIGRATED to testing (Debian testing watch)
[2017-04-11] Accepted yara 3.5.0+dfsg-9~bpo8+1 (source amd64 all) into jessie-backports->backports-policy, jessie-backports (Hilko Bengen)
[2017-04-09] Accepted yara 3.5.0+dfsg-9 (source) into unstable (Hilko Bengen)
[2017-01-21] Accepted yara 3.5.0+dfsg-8~bpo8+1 (source amd64 all) into jessie-backports, jessie-backports (Hilko Bengen)
[2016-11-28] yara 3.5.0+dfsg-8 MIGRATED to testing (Debian testing watch)
[2016-11-05] Accepted yara 3.5.0+dfsg-8 (source) into unstable (Hilko Bengen)

bugs [bug history graph]

all: 0

links

homepage
buildd: logs, checks, clang, reproducibility
popcon
browse source code
edit tags
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 3.7.1-2