xwpe - Debian Package Tracker

general

source: xwpe (main)
version: 1.5.30a-4
maintainer: Francesco Paolo Lovergine (DMD)
arch: any
std-ver: 4.6.2
VCS: unknown

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1.5.30a-3
oldstable: 1.5.30a-3
stable: 1.5.30a-4
unstable: 1.5.30a-4

versioned links

1.5.30a-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.5.30a-4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

xwpe (2 bugs: 0, 1, 1, 0)

action needed

1 security issue in trixie high

There is 1 open security issue in trixie.

1 important issue:

CVE-2016-20037: xwpe 1.5.30a-2.1 and prior contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying overly long input strings that exceed buffer boundaries. Attackers can craft malicious command-line arguments with 262 bytes of junk data followed by shellcode to overwrite the instruction pointer and achieve code execution or denial of service.

Created: 2026-03-29 Last update: 2026-03-29 04:30

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2016-20037: xwpe 1.5.30a-2.1 and prior contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying overly long input strings that exceed buffer boundaries. Attackers can craft malicious command-line arguments with 262 bytes of junk data followed by shellcode to overwrite the instruction pointer and achieve code execution or denial of service.

Created: 2026-03-29 Last update: 2026-03-29 04:30

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2016-20037: xwpe 1.5.30a-2.1 and prior contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying overly long input strings that exceed buffer boundaries. Attackers can craft malicious command-line arguments with 262 bytes of junk data followed by shellcode to overwrite the instruction pointer and achieve code execution or denial of service.

Created: 2026-03-29 Last update: 2026-03-29 04:30

1 security issue in bookworm high

There is 1 open security issue in bookworm.

1 important issue:

CVE-2016-20037: xwpe 1.5.30a-2.1 and prior contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying overly long input strings that exceed buffer boundaries. Attackers can craft malicious command-line arguments with 262 bytes of junk data followed by shellcode to overwrite the instruction pointer and achieve code execution or denial of service.

Created: 2026-03-29 Last update: 2026-03-29 04:30

lintian reports 2 errors and 1 warning high

Lintian reports 2 errors and 1 warning about this package. You should make the package lintian clean getting rid of them.

Created: 2022-07-30 Last update: 2026-01-21 16:33

The package has not entered testing even though the delay is over normal

The package has not entered testing even though the 5-day delay is over. Check why.

Created: 2026-01-22 Last update: 2026-04-09 13:30

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2026-04-06 Last update: 2026-04-09 12:30

debian/patches: 5 patches to forward upstream low

Among the 5 debian patches available in version 1.5.30a-4 of the package, we noticed the following issues:

5 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-02-26 Last update: 2024-03-24 07:40

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.6.2).

Created: 2024-04-07 Last update: 2026-03-31 15:01

testing migrations

excuses:
- Migration status for xwpe (- to 1.5.30a-4): BLOCKED: Rejected/violates migration policy/introduces a regression
- Issues preventing migration:
- ∙ ∙ Updating xwpe would introduce bugs in testing: #1098180
- Additional info (not blocking):
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/x/xwpe.html
- ∙ ∙ Reproduced on amd64
- ∙ ∙ Reproduced on arm64
- ∙ ∙ Reproduced on armhf
- ∙ ∙ Reproduced on i386
- ∙ ∙ Reproduced on ppc64el
- ∙ ∙ 746 days old (needed 5 days)
- Not considered

news

[rss feed]

[2025-09-21] xwpe REMOVED from testing (Debian testing watch)
[2024-03-29] xwpe 1.5.30a-4 MIGRATED to testing (Debian testing watch)
[2024-03-23] Accepted xwpe 1.5.30a-4 (source amd64) into unstable (Francesco Paolo Lovergine)
[2021-01-20] xwpe 1.5.30a-3 MIGRATED to testing (Debian testing watch)
[2021-01-14] Accepted xwpe 1.5.30a-3 (source) into unstable (Francesco Paolo Lovergine)
[2010-05-26] xwpe 1.5.30a-2.1 MIGRATED to testing (Debian testing watch)
[2010-05-16] Accepted xwpe 1.5.30a-2.1 (source i386) (Jari Aalto)
[2006-11-27] xwpe 1.5.30a-2 MIGRATED to testing (Debian testing watch)
[2006-11-24] Accepted xwpe 1.5.30a-2 (source i386) (Francesco Paolo Lovergine)
[2006-11-11] xwpe 1.5.30a-1 MIGRATED to testing (Debian testing watch)
[2006-11-04] Accepted xwpe 1.5.30a-1 (source i386) (Francesco Paolo Lovergine)
[2006-02-17] xwpe 1.5.29a-5 MIGRATED to testing (Debian testing watch)
[2006-02-13] Accepted xwpe 1.5.29a-5 (source i386) (Francesco Paolo Lovergine)
[2006-01-27] xwpe 1.5.29a-4 MIGRATED to testing (Debian testing watch)
[2006-01-16] Accepted xwpe 1.5.29a-4 (source i386) (Francesco Paolo Lovergine)
[2004-08-19] Accepted xwpe 1.5.29a-3 (i386 source) (Francesco Paolo Lovergine)
[2002-10-10] Accepted xwpe 1.5.29a-2 (i386 source) (Francesco Paolo Lovergine)
[2002-10-07] Accepted xwpe 1.5.29a-1 (i386 source) (Francesco Paolo Lovergine)
[2002-01-28] Installed xwpe 1.5.26a-4 (i386 source) (Francesco Paolo Lovergine)
[2002-01-26] Installed xwpe 1.5.26a-3 (i386 source) (Adrian Bunk)
[2001-02-05] Installed xwpe 1.5.26a-2 (i386 source) (Adrian Bunk)
[2001-01-05] Installed xwpe 1.5.26a-1 (i386 source) (Debian QA Group)
[2000-12-19] Installed xwpe 1.5.25a-1 (i386 source) (Debian QA Group)
[2000-10-22] Installed xwpe 1.5.23a-2 (source i386) (Mark Brown)
[2000-04-11] Installed xwpe 1.5.23a-1 (source i386) (Matej Vela)
[1999-12-27] Installed xwpe 1.5.22a-1 (source i386) (Matej Vela)
[1999-11-20] Installed xwpe 1.5.21a-1 (source i386) (Matej Vela)
[1999-10-30] Installed xwpe 1.5.20a-1 (source i386) (Matej Vela)
[1999-09-13] Installed xwpe 1.5.19a-1 (source i386) (Matej Vela)

bugs [bug history graph]

all: 5
RC: 1
I&N: 2
M&W: 2
F&P: 0
patch: 1

links

homepage
lintian (2, 1)
buildd: logs, cross
popcon
browse source code
edit tags
other distros
security tracker
screenshots
debian patches

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.5.30a-4build1