A new upstream version 4.1 is available, you should consider packaging it.
Standards version of the package is outdated.
high
The package is severely out of date with respect to the Debian Policy.The package should be updated to follow the last version of Debian Policy
(Standards-Version 4.1.4 instead of
3.9.8).
Depends on packages which need a new maintainer
normal
The packages that cron depends on which need a new maintainer are:
Lintian reports
7 warnings
about this package. You should make the package lintian clean getting rid of them.
33 new commits since last upload, time to release an update?
normal
vcswatch reports that
this package seems to have new commits in its VCS. You should consider updating
the debian/changelog and uploading this new version into the archive.
CVE-2017-9525: In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer script allows for group-crontab-to-root privilege escalation via symlink attacks against unsafe usage of the chown and chmod programs.
CVE-2017-9525: In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer script allows for group-crontab-to-root privilege escalation via symlink attacks against unsafe usage of the chown and chmod programs.
CVE-2017-9525: In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer script allows for group-crontab-to-root privilege escalation via symlink attacks against unsafe usage of the chown and chmod programs.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/c/cron.png){kind=link}