Processed: update

2013-06-26 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

 tags 695097 + security fixed-upstream
Bug #695097 [sleuthkit] sleuthkit: Fails to spot files named with a single dot 
on FAT filesystems
Added tag(s) security and fixed-upstream.
 retitle 695097 sleuthkit: CVE-2012-5619: Fails to spot files named with a 
 single dot on FAT filesystems
Bug #695097 [sleuthkit] sleuthkit: Fails to spot files named with a single dot 
on FAT filesystems
Changed Bug title to 'sleuthkit: CVE-2012-5619: Fails to spot files named with 
a single dot on FAT filesystems' from 'sleuthkit: Fails to spot files named 
with a single dot on FAT filesystems'
 thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
695097: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695097
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

___
forensics-devel mailing list
forensics-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/forensics-devel


Re: Prepared sleuthkit 4.1.0

2013-06-26 Thread Henri Salo
On Tue, Jun 18, 2013 at 01:07:23PM +0200, Michael Prokop wrote:
 we're lagging quite some versions behind with our sleuthkit
 packaging in Debian. I tried to take care of it and just pushed
 upstream and pristine-tar branches for new upstream version 4.1.0 of
 sleuthkit to our git repos (I hope you don't mind, Christophe).
 
 I also pushed my changes related to Debian packaging into branch
 mika/4.1.0 (to not mess with main 'debian' branch yet until it's
 known to be fine).
 
 I'm a bit unsure how to handle the libtsk3 package though.
 Our latest package libtsk3-3 shipped /usr/lib/libtsk3.so.3.4.0
 but upstream seems to have renamed 'tsk3' to just 'tsk' and I'm not
 sure how to handle the resulting /usr/lib/libtsk.so.10.0.0 package
 wise.
 
 Julien, you seem to have handled also the symbol files in the past
 and know what you're doing. :) Any chance you could take a look at
 the current situation and help us in getting a new package release
 out?

Hello,

I can't see sleuthkit 4.1.0 yet in unstable. What is the status with this? I can
help with some smaller tasks and testing if needed. Without much checking
security vulnerability[1] has been fixed in newer versions. In my opinion
comment Hardly a vulnerability in tracker is understating this issue as per
mailing list post[2] says:


The vulnerability is already exploited, for example, by the Flame
malware (possibly unintendedly). Flame uses an encrypted SQLite-DB named
. for extraction of confidential files and for update distribution.
An analyst may miss the file as the Sleuth Kit does not appropriately
show the file.

http://labs.bitdefender.com/2012/06/flame-the-story-of-leaked-data-carried-by-human-vector/
http://blog.crysys.hu/2012/06/flame-usb-dot-file-confirmed/


1: https://security-tracker.debian.org/tracker/CVE-2012-5619
2: http://www.openwall.com/lists/oss-security/2012/12/01/2

---
Henri Salo


signature.asc
Description: Digital signature
___
forensics-devel mailing list
forensics-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/forensics-devel

Re: Prepared sleuthkit 4.1.0

2013-06-26 Thread Michael Prokop
* Henri Salo [Wed Jun 26, 2013 at 10:10:32AM +0300]:
 On Tue, Jun 18, 2013 at 01:07:23PM +0200, Michael Prokop wrote:
  we're lagging quite some versions behind with our sleuthkit
  packaging in Debian. I tried to take care of it and just pushed
  upstream and pristine-tar branches for new upstream version 4.1.0 of
  sleuthkit to our git repos (I hope you don't mind, Christophe).

  I also pushed my changes related to Debian packaging into branch
  mika/4.1.0 (to not mess with main 'debian' branch yet until it's
  known to be fine).

  I'm a bit unsure how to handle the libtsk3 package though.
  Our latest package libtsk3-3 shipped /usr/lib/libtsk3.so.3.4.0
  but upstream seems to have renamed 'tsk3' to just 'tsk' and I'm not
  sure how to handle the resulting /usr/lib/libtsk.so.10.0.0 package
  wise.

  Julien, you seem to have handled also the symbol files in the past
  and know what you're doing. :) Any chance you could take a look at
  the current situation and help us in getting a new package release
  out?

 I can't see sleuthkit 4.1.0 yet in unstable. What is the status with this? I 
 can
 help with some smaller tasks and testing if needed.
[...]

It's still as stated above. We need a decision how to handle the
tsk library.

regards,
-mika-


signature.asc
Description: Digital signature
___
forensics-devel mailing list
forensics-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/forensics-devel

Bug report on recoverdm: mergebad crashes with exit status 139

2013-06-26 Thread Alexandre Rebert
Hi,

We found a crash in mergebad contained in the recoverdm package. You are being
contacted because your are listed as one of the maintainer of recoverdm.

We are planning to submit the bug to the Debian bug tracking system in two
weeks. We wanted to give you a heads-up, so that you some time to assess the
seriousness of the bug before it is publicly disclosed.

The bug report that will be submitted to the bug tracker is available at the
following url:

  
http://www.forallsecure.com/bug-reports/85e88aa4ad014840842cd3154c10d0b53a888473/

This email is part of a mass bug reporting campain comprising 1,182 bugs. You
might have received multiple emails from us concerning different programs. More
information about the mass bug reporting is available on the debian-devel
mailing list:

  http://lists.debian.org/debian-devel/2013/06/msg00720.html

Regards,
The Mayhem Team
Cylab, Carnegie Mellon University

___
forensics-devel mailing list
forensics-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/forensics-devel


Bug report on rifiuti: rifiuti crashes with exit status 139

2013-06-26 Thread Alexandre Rebert
Hi,

We found a crash in rifiuti contained in the rifiuti package. You are being
contacted because your are listed as one of the maintainer of rifiuti.

We are planning to submit the bug to the Debian bug tracking system in two
weeks. We wanted to give you a heads-up, so that you some time to assess the
seriousness of the bug before it is publicly disclosed.

The bug report that will be submitted to the bug tracker is available at the
following url:

  
http://www.forallsecure.com/bug-reports/e762a70ffda9d5fafcb60c11848699b7b9a5a1ac/

This email is part of a mass bug reporting campain comprising 1,182 bugs. You
might have received multiple emails from us concerning different programs. More
information about the mass bug reporting is available on the debian-devel
mailing list:

  http://lists.debian.org/debian-devel/2013/06/msg00720.html

Regards,
The Mayhem Team
Cylab, Carnegie Mellon University

___
forensics-devel mailing list
forensics-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/forensics-devel


есть варианты реанимирования зрения

2013-06-26 Thread admin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=

___
forensics-devel mailing list
forensics-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/forensics-devel