Hi,

the latest upstream version of libestr is 0.1.11 [1]

While this version is not mandatory for rsyslog, rsyslog upstream
recommends to use this version [2]

Regards,
Michael

[1] http://libestr.adiscon.com/
[2]
=======================================================================
Hi. A quick addon note to the release:

The new version 0.1.11 of libestr is not mandatory to run rsyslog 8.39.0,
but recommended. It contains several bugfixes and AIX support.

The packages and RPMs are built to require the new version and will
automatically install the required packages.

Florian

Am Di., 30. Okt. 2018 um 16:45 Uhr schrieb Florian Riedl <friedl@adiscon.com
=======================================================================

The changes are

| Version 0.1.11 2018-10-30
|
| - portability: remove issues associated with AC_FUNC_MALLOC
|   This configure.ac macro is known to cause issues and not provide real
|   benefit. Thus many projects have removed it, as we have for most of
|   the rsyslog projects. libestr seemed to have overlooked.
|   This came up when troubleshooting issues on IBM AIX.
| - make build on AIX
|   Thanks to github user purnimam1 for the patch
| - bugfix: es_str2num mishandling empty strings
|   If es_str2num() receives an empty string, misadressing happens.
|   Under extreme conditions, this theoretically can lead to a segfault.
|   Thanks to Jan Gerhards for the patch.
|   closes https://github.com/rsyslog/libestr/issues/10
| - CI/Travis: now also test on osX

The bugfix alone seems to make it worthwhile. Pierre, do you maybe need
some support in packaging this?

Cheers,
Flo

FWIW, this is the relevant part of this bugfix:

| diff -Nru libestr-0.1.10/src/string.c libestr-0.1.11/src/string.c
| --- libestr-0.1.10/src/string.c 2014-12-09 11:32:32.000000000 +0100
| +++ libestr-0.1.11/src/string.c 2018-10-18 18:38:39.000000000 +0200
| @@ -607,10 +607,10 @@
|  {
|         long long num;
|         unsigned char *c;
| -
|         if(s->lenStr == 0) {
|                 num = 0;
| -               *bSuccess = 0;
| +               if(bSuccess != NULL)
| +                       *bSuccess = 0;
|                 goto done;
|         }
|

And I can confirm that when you apply the current packaging to upstream
0.1.11 it still manages to build its packages (albeit not entirely
lintian clean).

Cheers,
Flo

Hello Pierre,

Could you please comment on whether you have any plans for libestr
packaging? Thanks.

As written before there are updates available, and I am willing to help.

Cheers,
Flo

Hello Pierre,

could you please comment on this, as I am wondering by now whether
libestr might be in need of salvaging.

Best regards,
Flo

Greetings,

To fix the issues with this package, I've prepared a salvaging upload
for libestr (versioned as 0.1.11-1), debdiff attached. An upload to
DELAYED/11 will follow shortly. Please feel free to tell me if I should
delay it longer or even cancel it.

Kind regards,
Flo

We believe that the bug you reported is fixed in the latest version of
libestr, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 912419@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Florian Ernst <florian@debian.org> (supplier of updated libestr package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sun, 05 Jun 2022 08:15:55 +0200
Source: libestr
Architecture: source
Version: 0.1.11-1
Distribution: unstable
Urgency: medium
Maintainer: Florian Ernst <florian@debian.org>
Changed-By: Florian Ernst <florian@debian.org>
Closes: 912419 1010434
Changes:
 libestr (0.1.11-1) unstable; urgency=medium
 .
   * New maintainer (Closes: #1010434)
     - redo packaging from scratch, following current best practices
     - reintroduce autopkgtest from #700293 which was silently dropped in
       0.1.10-1, but adjust it for cross-compilation (LP: #1117222)
   * New upstream release (Closes: #912419)
Checksums-Sha1:
 21746e524499ae262473f23065d728b532a5a071 1944 libestr_0.1.11-1.dsc
 3acdf7dae0c3e0fa3dabf43267a1fb5f625c0606 355544 libestr_0.1.11.orig.tar.gz
 4f41afd114639b3c799f60df0abf60f8ad98d16c 3612 libestr_0.1.11-1.debian.tar.xz
 805ecac9b8adaadfe9a2dcbd8bd026161545d1d1 6416 libestr_0.1.11-1_amd64.buildinfo
Checksums-Sha256:
 972ae4d0e689f3eca05003dfe1f1e3650641f041467e04f0bac966497bf1daf9 1944 libestr_0.1.11-1.dsc
 46632b2785ff4a231dcf241eeb0dcb5fc0c7d4da8ee49cf5687722cdbe8b2024 355544 libestr_0.1.11.orig.tar.gz
 9ab64663af53ecebc339571f076cd54a417d914123e6f4f62cd811ce2340e82e 3612 libestr_0.1.11-1.debian.tar.xz
 d1de1a801498a85fde0d80ba7a77d14bf584ca84e7c34fe4a3bf888ea34053db 6416 libestr_0.1.11-1_amd64.buildinfo
Files:
 92a0e6802abf0513c1ce30ecafc73812 1944 libs optional libestr_0.1.11-1.dsc
 1f25a2332750d4bfacfb314235fedff0 355544 libs optional libestr_0.1.11.orig.tar.gz
 66e95046df5b4020fa7bc814b27fe7f1 3612 libs optional libestr_0.1.11-1.debian.tar.xz
 a8dc8f336937b8a2626001a8224a5269 6416 libs optional libestr_0.1.11-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
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=DpuC
-----END PGP SIGNATURE-----