Bug#912419: Please package the latest upstream version 0.1.11
Hello Pierre, could you please comment on this, as I am wondering by now whether libestr might be in need of salvaging. Best regards, Flo signature.asc Description: PGP signature
Bug#912419: Please package the latest upstream version 0.1.11
Hello Pierre, On Fri, Feb 18, 2022 at 10:06:04PM +0100, Florian Ernst wrote: > [...] > FWIW, this is the relevant part of this bugfix: > [...] Could you please comment on whether you have any plans for libestr packaging? Thanks. As written before there are updates available, and I am willing to help. Cheers, Flo signature.asc Description: PGP signature
Bug#912419: Please package the latest upstream version 0.1.11
On Sat, Jan 29, 2022 at 08:59:39PM +0100, Florian Ernst wrote: > [...] > | Version 0.1.11 2018-10-30 > [...] > | - bugfix: es_str2num mishandling empty strings > | If es_str2num() receives an empty string, misadressing happens. > | Under extreme conditions, this theoretically can lead to a segfault. > | Thanks to Jan Gerhards for the patch. > | closes https://github.com/rsyslog/libestr/issues/10 > [...] FWIW, this is the relevant part of this bugfix: | diff -Nru libestr-0.1.10/src/string.c libestr-0.1.11/src/string.c | --- libestr-0.1.10/src/string.c 2014-12-09 11:32:32.0 +0100 | +++ libestr-0.1.11/src/string.c 2018-10-18 18:38:39.0 +0200 | @@ -607,10 +607,10 @@ | { | long long num; | unsigned char *c; | - | if(s->lenStr == 0) { | num = 0; | - *bSuccess = 0; | + if(bSuccess != NULL) | + *bSuccess = 0; | goto done; | } | And I can confirm that when you apply the current packaging to upstream 0.1.11 it still manages to build its packages (albeit not entirely lintian clean). Cheers, Flo signature.asc Description: PGP signature
Bug#912419: Please package the latest upstream version 0.1.11
On Wed, Oct 31, 2018 at 11:54:58AM +0100, Michael Biebl wrote: > the latest upstream version of libestr is 0.1.11 [1] > > While this version is not mandatory for rsyslog, rsyslog upstream > recommends to use this version [2] > [...] > === > Hi. A quick addon note to the release: > > The new version 0.1.11 of libestr is not mandatory to run rsyslog 8.39.0, > but recommended. It contains several bugfixes and AIX support. The changes are | Version 0.1.11 2018-10-30 | | - portability: remove issues associated with AC_FUNC_MALLOC | This configure.ac macro is known to cause issues and not provide real | benefit. Thus many projects have removed it, as we have for most of | the rsyslog projects. libestr seemed to have overlooked. | This came up when troubleshooting issues on IBM AIX. | - make build on AIX | Thanks to github user purnimam1 for the patch | - bugfix: es_str2num mishandling empty strings | If es_str2num() receives an empty string, misadressing happens. | Under extreme conditions, this theoretically can lead to a segfault. | Thanks to Jan Gerhards for the patch. | closes https://github.com/rsyslog/libestr/issues/10 | - CI/Travis: now also test on osX The bugfix alone seems to make it worthwhile. Pierre, do you maybe need some support in packaging this? Cheers, Flo signature.asc Description: PGP signature
Bug#912419: Please package the latest upstream version 0.1.11
Source: libestr Version: 0.1.10-2.1 Severity: wishlist Hi, the latest upstream version of libestr is 0.1.11 [1] While this version is not mandatory for rsyslog, rsyslog upstream recommends to use this version [2] Regards, Michael [1] http://libestr.adiscon.com/ [2] === Hi. A quick addon note to the release: The new version 0.1.11 of libestr is not mandatory to run rsyslog 8.39.0, but recommended. It contains several bugfixes and AIX support. The packages and RPMs are built to require the new version and will automatically install the required packages. Florian Am Di., 30. Okt. 2018 um 16:45 Uhr schrieb Florian Riedl : > Hi all, > > Today, we release rsyslog 8.39.0. > > This release again brings a lot of changes. Noteworthy are the improved > truncation detection in imfile and a workaround for imjournals reloading > behaviour. > > Other than that, the release also provides a lot of fixes for the queue > subsystem, imrelp, imkafka, imudp, the gcry crypto provider, the rsyslog > core and many more. > > For more information, please check out the Changelog below. > > There were also updated dependencies. The new release requires libestr > 0.1.11. > ChangeLog: > > https://github.com/rsyslog/rsyslog/blob/v8-stable/ChangeLog > > Download: > > http://www.rsyslog.com/downloads/download-v8-stable/ > > As always, feedback is appreciated. > > Best regards, > Florian Riedl > === -- System Information: Debian Release: buster/sid APT prefers unstable APT policy: (500, 'unstable'), (200, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.18.0-2-amd64 (SMP w/4 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled