libestr has been in main for a while so I'm closing this bug.

** Changed in: libestr (Ubuntu)
       Status: Fix Committed => Fix Released

You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to libestr in Ubuntu.

  [MIR] libestr

Status in libestr package in Ubuntu:
  Fix Released

Bug description:
  The new upstream version of rsyslog found in Debian unstable depends
  unconditionally on libestr.  As a string handling library that will be
  used by a privileged process, this is a fairly security-sensitive
  library. and show
  zero CVEs for this package, but as a little-known library that's only
  been around for 3 years, a more thorough security audit is probably
  needed.  The source does build cleanly with -Werror -Wall, which is a
  hopeful sign.

  The package has no other dependencies.

To manage notifications about this bug go to:

Mailing list:
Post to     :
Unsubscribe :
More help   :

Reply via email to