Debian Package Tracker

general

source: cron (main)
version: 3.0pl1-133
maintainer: Javier Fernández-Sanguino Peña [DMD]
uploaders: Christian Kastner [DMD]
arch: any
std-ver: 4.3.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 3.0pl1-127+deb8u1
old-sec: 3.0pl1-127+deb8u2
stable: 3.0pl1-128+deb9u1
testing: 3.0pl1-133
unstable: 3.0pl1-133

versioned links

3.0pl1-127+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.0pl1-127+deb8u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.0pl1-128+deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.0pl1-133: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

cron (90 bugs: 0, 26, 64, 0)

action needed

A new upstream version is available: 4.1 high

A new upstream version 4.1 is available, you should consider packaging it.

Created: 2019-04-05 Last update: 2019-06-19 06:06

19 bugs tagged patch in the BTS normal

The BTS contains patches fixing 19 bugs (21 if counting merged bugs), consider including or untagging them.

Created: 2019-04-01 Last update: 2019-06-19 08:34

Depends on packages which need a new maintainer normal

The packages that cron depends on which need a new maintainer are:

lsb (#924519)
- Depends: lsb-base
anacron (#897138)
- Suggests: anacron

Created: 2018-01-14 Last update: 2019-06-19 06:16

Fails to build during reproducibility testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2019-04-09 Last update: 2019-06-19 06:00

1 new commit since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 766f3b21a6fade81484eb28f70129a598fae8335
Author: Christian Kastner <ckk@kvr.at>
Date:   Sun Mar 24 19:14:59 2019 +0100

    Whitespace
    
    (The last commit changed this on purpose, only to find out that it was a
    mistake included in the original upstream source...)

Created: 2019-04-07 Last update: 2019-06-19 05:42

4 ignored security issues in stretch low

There are 4 open security issues in stretch.

4 issues skipped by the security teams:

CVE-2019-9704: Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (daemon crash) via a large crontab file because the calloc return value is not checked.
CVE-2017-9525: In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer script allows for group-crontab-to-root privilege escalation via symlink attacks against unsafe usage of the chown and chmod programs.
CVE-2019-9706: Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (use-after-free and daemon crash) because of a force_rescan_user error.
CVE-2019-9705: Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (memory consumption) via a large crontab file because an unlimited number of lines is accepted.

Please fix them.

Created: 2017-06-09 Last update: 2019-04-07 01:50

news

[rss feed]

[2019-04-07] cron 3.0pl1-133 MIGRATED to testing (Debian testing watch)
[2019-03-21] Accepted cron 3.0pl1-127+deb8u2 (source amd64) into oldstable (Mike Gabriel)
[2019-03-11] Accepted cron 3.0pl1-133 (source) into unstable (Christian Kastner)
[2019-03-07] cron 3.0pl1-132 MIGRATED to testing (Debian testing watch)
[2019-03-07] cron 3.0pl1-132 MIGRATED to testing (Debian testing watch)
[2019-02-24] Accepted cron 3.0pl1-132 (source) into unstable (Christian Kastner)
[2019-02-20] Accepted cron 3.0pl1-131 (source) into unstable (Christian Kastner)
[2018-03-18] cron 3.0pl1-130 MIGRATED to testing (Debian testing watch)
[2018-03-12] Accepted cron 3.0pl1-130 (source i386) into unstable (Javier Fernández-Sanguino Peña) (signed by: Javier Fernandez-Sanguino)
[2018-03-11] Accepted cron 3.0pl1-129 (source i386) into unstable (Javier Fernández-Sanguino Peña) (signed by: Javier Fernandez-Sanguino)
[2017-12-09] Accepted cron 3.0pl1-128+deb9u1 (source amd64) into proposed-updates->stable-new, proposed-updates (Laurent Bigonville)
[2017-10-12] cron 3.0pl1-128.1 MIGRATED to testing (Debian testing watch)
[2017-10-06] Accepted cron 3.0pl1-128.1 (source amd64) into unstable (Laurent Bigonville)
[2015-06-11] Accepted cron 3.0pl1-127+deb8u1 (source i386) into proposed-updates->stable-new, proposed-updates (Christian Kastner) (signed by: Javier Fernandez-Sanguino)
[2015-05-19] cron 3.0pl1-128 MIGRATED to testing (Britney)
[2015-05-14] Accepted cron 3.0pl1-128 (source i386) into unstable (Christian Kastner) (signed by: Javier Fernandez-Sanguino)
[2014-11-05] cron 3.0pl1-127 MIGRATED to testing (Britney)
[2014-10-25] Accepted cron 3.0pl1-127 (source i386) into unstable (Christian Kastner) (signed by: Javier Fernandez-Sanguino)
[2014-10-24] Accepted cron 3.0pl1-126 (source i386) into unstable (Javier Fernández-Sanguino Peña) (signed by: Javier Fernandez-Sanguino)
[2014-10-24] Accepted cron 3.0pl1-125 (source i386) into unstable (Javier Fernández-Sanguino Peña) (signed by: Javier Fernandez-Sanguino)
[2014-08-15] cron 3.0pl1-124.2 MIGRATED to testing (Britney)
[2014-08-09] Accepted cron 3.0pl1-124.2 (source) into unstable (Ansgar Burchardt)
[2014-06-10] cron 3.0pl1-124.1 MIGRATED to testing (Debian testing watch)
[2014-06-04] Accepted cron 3.0pl1-124.1 (source amd64) (Laurent Bigonville)
[2012-07-09] cron 3.0pl1-124 MIGRATED to testing (Debian testing watch)
[2012-07-03] Accepted cron 3.0pl1-124 (source i386) (Javier Fernández-Sanguino Peña)
[2012-07-03] cron 3.0pl1-123 MIGRATED to testing (Debian testing watch)
[2012-06-23] Accepted cron 3.0pl1-123 (source i386) (Javier Fernández-Sanguino Peña)
[2012-02-10] cron 3.0pl1-121 MIGRATED to testing (Debian testing watch)
[2012-01-30] Accepted cron 3.0pl1-121 (source i386) (Javier Fernández-Sanguino Peña)

bugs [bug history graph]

all: 87 91
RC: 0
I&N: 27
M&W: 60 64
F&P: 0
patch: 19 21

links

homepage
lintian
buildd: logs, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 3.0pl1-133ubuntu1
58 bugs (4 patches)
patches for 3.0pl1-133ubuntu1