fluidsynth - Debian Package Tracker

general

source: fluidsynth (main)
version: 2.1.7-1
maintainer: Debian Multimedia Maintainers (archive) (DMD)
uploaders: Alessio Treglia [DMD] – David Henningsson [DMD] – Jaromír Mikeš [DMD] [DM] – Dennis Braun [DMD]
arch: any
std-ver: 4.5.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 1.1.6-4
stable: 1.1.11-1
testing: 2.1.7-1
unstable: 2.1.7-1

versioned links

1.1.6-4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.1.11-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.1.7-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

fluidsynth
libfluidsynth-dev
libfluidsynth2

action needed

A new upstream version is available: 2.2.0 high

A new upstream version 2.2.0 is available, you should consider packaging it.

Created: 2021-02-02 Last update: 2021-04-23 08:00

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2021-28421: FluidSynth 2.1.7 contains a use after free vulnerability in sfloader/fluid_sffile.c that can result in arbitrary code execution or a denial of service (DoS) if a malicious soundfont2 file is loaded into a fluidsynth library.

Created: 2021-04-13 Last update: 2021-04-18 22:00

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2021-28421: FluidSynth 2.1.7 contains a use after free vulnerability in sfloader/fluid_sffile.c that can result in arbitrary code execution or a denial of service (DoS) if a malicious soundfont2 file is loaded into a fluidsynth library.

Created: 2021-04-13 Last update: 2021-04-18 22:00

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 2.2.0-1, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit da0de2527f40724081c4021bdef37ec51b5ba683
Author: Dennis Braun <d_braun@kabelmail.de>
Date:   Tue Apr 6 17:40:58 2021 +0200

    Update d/changelog for 2.2.0-1

commit 28bac217728a6ba11a0c4fa06f12bf28c3de53c8
Author: Dennis Braun <d_braun@kabelmail.de>
Date:   Tue Apr 6 17:37:33 2021 +0200

    Add missing function to symbols file

commit 33a09a943fc505e7f6a6112f0c5d42ce64b6527d
Author: Dennis Braun <d_braun@kabelmail.de>
Date:   Tue Apr 6 17:34:32 2021 +0200

    d/copyright: Add myself to the d/ section

commit ddc40956903fef8e31097aa5315a9e8ae4126302
Author: Dennis Braun <d_braun@kabelmail.de>
Date:   Tue Apr 6 17:33:24 2021 +0200

    d/copyright: Update entry for doc/examples

commit 3a95ea333deb2196d377c847b8a3819931dc5ffb
Author: Dennis Braun <d_braun@kabelmail.de>
Date:   Tue Apr 6 17:32:03 2021 +0200

    Update symbols file

commit a4471940c70508b7cd090d73a59aaf63ca10ebce
Author: Dennis Braun <d_braun@kabelmail.de>
Date:   Tue Apr 6 16:51:52 2021 +0200

    Bump soname libfluidsynth2 to libfluidsynth3

commit c0e8c3b9e4f96ecfd68b103cd2e11db48c5bd6fb
Author: Dennis Braun <d_braun@kabelmail.de>
Date:   Tue Apr 6 16:49:01 2021 +0200

    Update examples installation

commit 21d77a15af39c7a6f98e65ec1cc14ce69a6ababa
Merge: 9554066 f62f365
Author: Dennis Braun <d_braun@kabelmail.de>
Date:   Tue Apr 6 16:34:23 2021 +0200

    Update upstream source from tag 'upstream/2.2.0'
    
    Update to upstream version '2.2.0'
    with Debian dir f49c79c1fb1e1151bc3277729c804b10e53620c9

commit f62f365668b92f1be9658fb338e691cc3ad138b1
Author: Dennis Braun <d_braun@kabelmail.de>
Date:   Tue Apr 6 16:34:19 2021 +0200

    New upstream version 2.2.0

Created: 2021-04-06 Last update: 2021-04-18 00:06

1 low-priority security issue in buster low

There is 1 open security issue in buster.

1 issue left for the package maintainer to handle:

CVE-2021-28421: (needs triaging) FluidSynth 2.1.7 contains a use after free vulnerability in sfloader/fluid_sffile.c that can result in arbitrary code execution or a denial of service (DoS) if a malicious soundfont2 file is loaded into a fluidsynth library.

You can find information about how to handle this issue in the security team's documentation.

Created: 2021-04-13 Last update: 2021-04-18 22:00

Build log checks report 2 warnings low

Build log checks report 2 warnings

Created: 2018-04-10 Last update: 2020-02-29 13:01

news

[rss feed]

[2021-02-12] fluidsynth 2.1.7-1 MIGRATED to testing (Debian testing watch)
[2021-02-10] Accepted fluidsynth 2.1.7-1 (source) into unstable (Dennis Braun) (signed by: Adam Borowski)
[2021-01-16] fluidsynth 2.1.6-1 MIGRATED to testing (Debian testing watch)
[2021-01-12] Accepted fluidsynth 2.1.6-1 (source) into unstable (Dennis Braun) (signed by: Sebastian Ramacher)
[2020-09-28] fluidsynth 2.1.5-1 MIGRATED to testing (Debian testing watch)
[2020-09-26] Accepted fluidsynth 2.1.5-1 (source) into unstable (Dennis Braun) (signed by: Sebastian Ramacher)
[2020-09-07] fluidsynth 2.1.4-1 MIGRATED to testing (Debian testing watch)
[2020-09-05] Accepted fluidsynth 2.1.4-1 (source) into unstable (Dennis Braun) (signed by: Sebastian Ramacher)
[2020-07-06] fluidsynth 2.1.3-1 MIGRATED to testing (Debian testing watch)
[2020-07-03] Accepted fluidsynth 2.1.3-1 (source) into unstable (Dennis Braun) (signed by: Sebastian Ramacher)
[2020-05-11] fluidsynth 2.1.2-1 MIGRATED to testing (Debian testing watch)
[2020-05-08] Accepted fluidsynth 2.1.2-1 (source) into unstable (Dennis Braun) (signed by: Sebastian Ramacher)
[2020-03-07] fluidsynth 2.1.1-2 MIGRATED to testing (Debian testing watch)
[2020-03-04] Accepted fluidsynth 2.1.1-2 (source) into unstable (Fabian Greffrath)
[2020-02-28] Accepted fluidsynth 2.1.1-1 (source) into unstable (Fabian Greffrath)
[2019-12-17] fluidsynth 2.1.0-1 MIGRATED to testing (Debian testing watch)
[2019-12-14] Accepted fluidsynth 2.1.0-1 (source) into unstable (Fabian Greffrath)
[2019-12-09] Accepted fluidsynth 2.0.5-1 (source amd64) into experimental, experimental (Fabian Greffrath)
[2019-08-08] fluidsynth 1.1.11-4 MIGRATED to testing (Debian testing watch)
[2019-08-05] Accepted fluidsynth 1.1.11-4 (source) into unstable (Fabian Greffrath)
[2019-08-05] Accepted fluidsynth 1.1.11-3 (source) into unstable (Fabian Greffrath)
[2019-08-04] Accepted fluidsynth 1.1.11-2 (source) into unstable (Fabian Greffrath)
[2018-06-04] fluidsynth 1.1.11-1 MIGRATED to testing (Debian testing watch)
[2018-06-02] Accepted fluidsynth 1.1.11-1 (source amd64) into unstable (Fabian Greffrath)
[2018-03-21] fluidsynth 1.1.10-1 MIGRATED to testing (Debian testing watch)
[2018-03-15] Accepted fluidsynth 1.1.10-1 (source amd64) into unstable (Fabian Greffrath)
[2018-01-12] fluidsynth 1.1.9-1 MIGRATED to testing (Debian testing watch)
[2018-01-07] Accepted fluidsynth 1.1.9-1 (source) into unstable (Jaromír Mikeš)
[2017-12-15] fluidsynth 1.1.8-3 MIGRATED to testing (Debian testing watch)
[2017-12-10] Accepted fluidsynth 1.1.8-3 (source) into unstable (Jaromír Mikeš)

bugs [bug history graph]

all: 2
RC: 1
I&N: 1
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2.1.7-1
3 bugs (1 patch)