Debian Package Tracker

general

source: fontforge (main)
version: 1:20170731~dfsg-1
maintainer: Debian Fonts Task Force (archive) [DMD]
uploaders: Hideki Yamane [DMD] – Rogério Brito [DMD] [dm] – Davide Viti [DMD] – Vasudev Kamath [DMD] – Daniel Kahn Gillmor [DMD] – Christian Perrier [DMD] – Jonas Smedegaard [DMD]
arch: all any
std-ver: 4.1.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.0.20120101+git-2
o-o-sec: 0.0.20120101+git-2+deb7u1
oldstable: 20120731.b-5+deb8u1
old-sec: 20120731.b-5+deb8u1
stable: 1:20161005~dfsg-4+deb9u1
stable-sec: 1:20161005~dfsg-4+deb9u1
testing: 1:20170731~dfsg-1
unstable: 1:20170731~dfsg-1

versioned links

0.0.20120101+git-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.0.20120101+git-2+deb7u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
20120731.b-5+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
20120731.b-7.2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:20161005~dfsg-4+deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:20170731~dfsg-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

fontforge
fontforge-common
fontforge-dbg
fontforge-doc
fontforge-nox
libfontforge-dev
libfontforge2
libgdraw5
python-fontforge

action needed

lintian reports 10 warnings high

Lintian reports 10 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2017-10-19 Last update: 2018-09-11 08:03

2 security issues in buster high

There are 2 open security issues in buster.

2 important issues:

CVE-2017-11573: FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11570: FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.

Please fix them.

Created: 2017-07-24 Last update: 2018-06-02 08:03

2 security issues in sid high

There are 2 open security issues in sid.

2 important issues:

CVE-2017-11573: FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11570: FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.

Please fix them.

Created: 2017-07-24 Last update: 2018-06-02 08:03

Build log checks report 1 error and 1 warning high

Build log checks report 1 error and 1 warning

Created: 2017-10-26 Last update: 2017-10-26 07:22

10 new commits since last upload, time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 1:20170731~dfsg-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 81b8c72b1c6c8aa4becc82f53932ee4ac6adf2e1
Author: Vasudev Kamath <vasudev@copyninja.info>
Date:   Mon Jan 15 11:02:21 2018 +0530

    Update changelog.

commit 7cae9fbfd38330eeea979926284ac54f29a2f8c1
Author: Vasudev Kamath <vasudev@copyninja.info>
Date:   Mon Jan 15 11:02:11 2018 +0530

    Regenerate debian/control.

commit 8bda7fd5fdfff048ee30132e839bd05d168f3669
Author: Vasudev Kamath <vasudev@copyninja.info>
Date:   Mon Jan 15 11:00:51 2018 +0530

    Install pkgconfig files in multiarch specific directory.

commit a2e9db739b0558aa4c34932b4a94569408568b29
Author: Vasudev Kamath <vasudev@copyninja.info>
Date:   Mon Jan 15 10:11:49 2018 +0530

    Use salsa url for Vcs-* fields.

commit d909f40b27cdae66096032ea0f6b81e68c2ad212
Author: Vasudev Kamath <vasudev@copyninja.info>
Date:   Mon Jan 15 10:10:36 2018 +0530

    Mark package compliance with Debian policy 4.1.3.

commit 5ae00120fcd8ebe7edd5967a3e469b9c1bc39a89
Author: Hideki Yamane <henrich@debian.org>
Date:   Sat Jan 13 17:27:27 2018 +0900

    Also drop things in debian/control.in
    
    I forgot now fontforge uses CDBS, and control file is generated
    from control.in

commit 44a4da38107ca4d0d72963db07bda81cd40da2d7
Author: Hideki Yamane <henrich@debian.org>
Date:   Wed Oct 25 05:50:46 2017 +0900

    don't forget bracket...

commit 6f8240291166259f788ebf98b1fb9d63e1ff17e9
Author: Hideki Yamane <henrich@debian.org>
Date:   Tue Oct 24 20:49:15 2017 +0900

    dbg to dbgsym migration

commit 16a2396bed10e99364d2b825e6ce5dac93571112
Author: Hideki Yamane <henrich@debian.org>
Date:   Tue Oct 24 20:40:04 2017 +0900

    drop defoma

commit 1d9d406c4e500dfa1ae2e7e99ae9b1a5b691d0e5
Author: Hideki Yamane <henrich@debian.org>
Date:   Tue Oct 24 20:37:32 2017 +0900

    drop autotrace
    
    https://tracker.debian.org/news/846074
    autotrace was already removed from repository.

The Vcs URL is using anonscm.debian.org. Please update it for the move to salsa.debian.org.

Created: 2017-12-03 Last update: 2018-12-10 12:23

Depends on packages which need a new maintainer normal

The packages that fontforge depends on which need a new maintainer are:

giflib (#834410)
- Depends: libgif-dev libgif7 libgif7
- Build-Depends: libgif-dev

Created: 2017-12-02 Last update: 2018-12-10 12:15

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2018-10-01 Last update: 2018-12-10 12:01

Multiarch hinter reports 4 issue(s) normal

There are issues with the multiarch metadata for this package.

fontforge-common could be marked Multi-Arch: foreign
fontforge-doc could be marked Multi-Arch: foreign
fontforge-dbg could be marked Multi-Arch: same
python-fontforge could be marked Multi-Arch: same

Created: 2016-09-14 Last update: 2018-12-10 11:48

2 ignored security issues in stretch low

There are 2 open security issues in stretch.

2 issues skipped by the security teams:

CVE-2017-11573: FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11570: FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.

Please fix them.

Created: 2017-07-24 Last update: 2018-06-02 08:03

2 ignored security issues in jessie low

There are 2 open security issues in jessie.

2 issues skipped by the security teams:

CVE-2017-11573: FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11570: FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.

Please fix them.

Created: 2017-07-24 Last update: 2018-06-02 08:03

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.2.1 instead of 4.1.0).

Created: 2017-08-26 Last update: 2018-08-26 08:17

testing migrations

This package will soon be part of the auto-readline transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.

news

[rss feed]

[2017-10-07] fontforge 1:20170731~dfsg-1 MIGRATED to testing (Debian testing watch)
[2017-10-05] Accepted fontforge 1:20170731~dfsg-1 (source all amd64) into unstable, unstable (Jonas Smedegaard)
[2017-09-08] Accepted fontforge 20120731.b-5+deb8u1 (source i386 all) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Vasudev Kamath)
[2017-09-07] Accepted fontforge 1:20161005~dfsg-4+deb9u1 (source all i386) into proposed-updates->stable-new, proposed-updates (Vasudev Kamath)
[2017-08-26] Accepted fontforge 0.0.20120101+git-2+deb7u1 (source amd64) into oldoldstable (Thorsten Alteholz)
[2016-11-19] fontforge 1:20161005~dfsg-4 MIGRATED to testing (Debian testing watch)
[2016-11-12] Accepted fontforge 1:20161005~dfsg-4 (source all i386) into unstable (Vasudev Kamath)
[2016-10-23] Accepted fontforge 1:20161005~dfsg-3 (source all i386) into experimental (Vasudev Kamath)
[2016-10-15] Accepted fontforge 1:20161005~dfsg-2 (source all i386) into experimental (Vasudev Kamath)
[2016-10-10] Accepted fontforge 1:20161005~dfsg-1 (source all i386) into experimental (Vasudev Kamath)
[2016-09-10] Accepted fontforge 1:20160404~dfsg-4 (source all i386) into experimental (Vasudev Kamath)
[2016-08-13] Accepted fontforge 1:20160404~dfsg-3 (source all i386) into experimental (Vasudev Kamath)
[2016-08-07] Accepted fontforge 1:20160404~dfsg-2 (source all i386) into experimental (Vasudev Kamath)
[2016-07-24] Accepted fontforge 1:20160404~dfsg-1 (source all i386) into experimental, experimental (Vasudev Kamath)
[2016-04-26] fontforge 20120731.b-7.2 MIGRATED to testing (Debian testing watch)
[2016-04-21] Accepted fontforge 20120731.b-7.2 (source) into unstable (James Cowgill)
[2015-12-23] fontforge 20120731.b-7.1 MIGRATED to testing (Debian testing watch)
[2015-12-18] Accepted fontforge 20120731.b-7.1 (source all amd64) into unstable (Matthias Klose)
[2015-12-11] fontforge 20120731.b-7 MIGRATED to testing (Debian testing watch)
[2015-12-05] Accepted fontforge 20120731.b-7 (source all amd64) into unstable (Hideki Yamane)
[2015-12-02] fontforge 20120731.b-6 MIGRATED to testing (Britney)
[2015-11-26] Accepted fontforge 20120731.b-6 (source all amd64) into unstable (Hideki Yamane)
[2014-01-12] fontforge 20120731.b-5 MIGRATED to testing (Debian testing watch)
[2014-01-01] Accepted fontforge 20120731.b-5 (source i386 all) (Christian Perrier)
[2013-11-14] fontforge 20120731.b-4 MIGRATED to testing (Debian testing watch)
[2013-11-03] Accepted fontforge 20120731.b-4 (source i386 all) (Christian Perrier)
[2013-07-07] fontforge 20120731.b-3 MIGRATED to testing (Debian testing watch)
[2013-06-25] Accepted fontforge 20120731.b-3 (source amd64 all) (Hideki Yamane)
[2013-06-15] fontforge 20120731.b-2 MIGRATED to testing (Debian testing watch)
[2013-06-05] Accepted fontforge 20120731.b-2 (source amd64 all) (Hideki Yamane)

bugs [bug history graph]

all: 16
RC: 1
I&N: 10
M&W: 5
F&P: 0
patch: 1

links

homepage
lintian (0, 10)
buildd: logs, checks, clang, reproducibility
popcon
browse source code
edit tags
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1:20170731~dfsg-1
28 bugs (1 patch)