libestr has been in main for a while so I'm closing this bug.
** Changed in: libestr (Ubuntu)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to libestr in Ubuntu.
https://bugs.launchpad.net/bugs/1242561
Title:
[MIR] libestr
Status in libestr package in Ubuntu:
Fix Released
Bug description:
The new upstream version of rsyslog found in Debian unstable depends
unconditionally on libestr. As a string handling library that will be
used by a privileged process, this is a fairly security-sensitive
library.
http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=libestr and
http://people.canonical.com/~ubuntu-security/cve/universe.html show
zero CVEs for this package, but as a little-known library that's only
been around for 3 years, a more thorough security audit is probably
needed. The source does build cleanly with -Werror -Wall, which is a
hopeful sign.
The package has no other dependencies.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libestr/+bug/1242561/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
