#1143995 Failure to encrypt a file with 4294967295 bytes

Package:
ccrypt
Source:
ccrypt
Description:
secure encryption and decryption of files and streams
Submitter:
Sven Geuer
Date:
2026-08-09 16:35:03 UTC
Severity:
normal
Tags:
#1143995#5
Date:
2026-08-09 15:13:04 UTC
From:
To:
The bug described below is reproducible with Debian's current version
of ccrypt.

Upstream has published a patch fixing the issue [1].

[1] https://sourceforge.net/p/ccrypt/bugs/_discuss/thread/227381baea/231c/attachment/ccrypt-bug31-patch.diff
-------- Forwarded Message --------
From: Peter Scott <peterscott@pobox.com>
To: team+pkg-security@tracker.debian.org
Subject: Bug in ccrypt version 1.10
Date: 07/22/26 09:42:55
#1143995#8
Date:
2026-08-09 16:03:14 UTC
From:
To:
Hello,

Bug #1143995 in ccrypt reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/pkg-security-team/ccrypt/-/commit/75c79e7043798bfdbcb9cbf189a19b923f392e18
------------------------------------------------------------------------
d/p/*: Add patch to fix encryption of files of size 4G-1.

Closes: #1143995
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1143995
#1143995#15
Date:
2026-08-09 16:33:41 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
ccrypt, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1143995@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sven Geuer <sge@debian.org> (supplier of updated ccrypt package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sun, 09 Aug 2026 18:12:23 +0200
Source: ccrypt
Architecture: source
Version: 1.11-7
Distribution: unstable
Urgency: medium
Maintainer: Debian Security Tools <team+pkg-security@tracker.debian.org>
Changed-By: Sven Geuer <sge@debian.org>
Closes: 1143995
Changes:
 ccrypt (1.11-7) unstable; urgency=medium
 .
   * Team upload.
   * d/p/*: Add patch to fix encryption of files of size 4G-1
     (Closes: #1143995).
   * d/control:
     - Drop 'Priority: optional'.
     - Drop 'Rules-Requires-Root: no'.
     - Bump Standards-Version.
     - Bump debhelper-compat to 14. Consequently, drop all ${*:Depends}
       substvar mentionings.
   * d/copyright: Bump packaging copyright years.
   * d/gbp.conf: Set upstream-branch and debian-branch to */latest.
Checksums-Sha1:
 2f78d8f256e0eaae622a4c0b16b22b3672f5f92b 2026 ccrypt_1.11-7.dsc
 ae769dd87919ed01f7bc01ea300ecf75e9914978 6704 ccrypt_1.11-7.debian.tar.xz
 a74b7014e3e3d9e25e58a0a6cc46ac5391bad6c2 8110 ccrypt_1.11-7_amd64.buildinfo
Checksums-Sha256:
 c978d4538e64a6bf18db447a672ba7690b5ed47d539b8820bd26eb4f67637ea7 2026 ccrypt_1.11-7.dsc
 6c7d4022c45e6910f40d3ad947724334845777a3e533082e680781578bedef67 6704 ccrypt_1.11-7.debian.tar.xz
 1367b0ab29851214a2b9aa545c76a65ac9162cc980ad1f7ff4f985626efcc801 8110 ccrypt_1.11-7_amd64.buildinfo
Files:
 4b342c28d12867d2bf3ad44e7e50482a 2026 utils optional ccrypt_1.11-7.dsc
 8a5a4ef015377a7e1f4cc1ee016f6c42 6704 utils optional ccrypt_1.11-7.debian.tar.xz
 d9f9a3c0757f7ace1b30f9304bd41a56 8110 utils optional ccrypt_1.11-7_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----

iQJDBAEBCgAtFiEEPfXoqkP8n9/QhvGVrfUO2vit1YUFAmp4p/wPHHNnZUBkZWJp
YW4ub3JnAAoJEK31Dtr4rdWFo90P/jZ99d7g0h+Njmt/YFNtMbDRwuVPUtRvt0qw
kkDL71J570R8cG92SOhb7AHnI6zK0yPE0j2tivMNoqwc9jaJowP6kzA+pdaXoMlb
3kUc6W2eGE6TGI8I1mWX3nT6V0oQt6+IPTxr5T5T+vNb0eBrV7Vd84fM5cDXOAJH
5nxXbGaWFclf4ZYikJcc7leKaA1ePhMpGZDBUKNK1SgN8TaMEMOn3i050L+hV9DO
MlNYk4elrW5g2NpIXRsXX7vVI86aqE7rq0egkhlsV+csXBFYgE7DvLhoaRqO1Wlw
HSH6F9VkwdAk1MqEO4qdE08hdbuHMbOc/25c+4dMWxqVRLRqXa6VEWzuXYuFbxPa
VB4GjcDion75/Jt2AWF0DJyhYEbPPm0Vi7b8xKen6KPjp45gNdDMYx8jYClfMy6g
WVYYhVYjl5KWo9dbWm+ppwPgqipCR+rqHmuhyqVvsZ3UV/z9RlfB6sbwHp+01sew
EjdCIrvLo0ut8muCOF5KEQNO+7WV3yJdh/urcxeASndP4Qg7Y9PBMKDuB3ENu/3y
uvZlaUo10oZ5wTAAHk8HAGtvCfYOezp2pv4xqYG0bV1ngDaE2hFOpGxnJFTxbrgn
5YeVlDkxg0ufCt+JUM+0VQMTTZlTs35+eur7WzejmYctbp01PtI6ZJvasjxEeZ6H
xVrNMsVA
=QAHe
-----END PGP SIGNATURE-----