gegl - Debian Package Tracker

general

source: gegl (main)
version: 1:0.4.40-1
maintainer: Debian GNOME Maintainers (archive) (DMD)
uploaders: Emilio Pozuelo Monfort [DMD] – Josselin Mouette [DMD] – Jeremy Bicha [DMD]
arch: all any
std-ver: 4.5.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.3.8-4
oldstable: 0.4.12-2
stable: 1:0.4.26-2
testing: 1:0.4.38-1
unstable: 1:0.4.40-1

versioned links

0.3.8-4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.4.12-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:0.4.26-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:0.4.38-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:0.4.40-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

gegl
gir1.2-gegl-0.4
libgegl-0.4-0
libgegl-common
libgegl-dev (2 bugs: 0, 2, 0, 0)
libgegl-doc

action needed

lintian reports 3 errors and 63 warnings high

Lintian reports 3 errors and 63 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2022-01-01 Last update: 2022-11-19 14:06

2 security issues in sid high

There are 2 open security issues in sid.

2 important issues:

CVE-2018-10111: An issue was discovered in GEGL through 0.3.32. The render_rectangle function in process/gegl-processor.c has unbounded memory allocation, leading to a denial of service (application crash) upon allocation failure.
CVE-2018-10112: An issue was discovered in GEGL through 0.3.32. The gegl_tile_backend_swap_constructed function in buffer/gegl-tile-backend-swap.c allows remote attackers to cause a denial of service (write access violation) or possibly have unspecified other impact via a malformed PNG file that is mishandled during a call to the babl_format_get_bytes_per_pixel function in babl-format.c in babl 0.1.46.

Created: 2022-07-04 Last update: 2022-11-19 00:36

2 security issues in bookworm high

There are 2 open security issues in bookworm.

2 important issues:

CVE-2018-10111: An issue was discovered in GEGL through 0.3.32. The render_rectangle function in process/gegl-processor.c has unbounded memory allocation, leading to a denial of service (application crash) upon allocation failure.
CVE-2018-10112: An issue was discovered in GEGL through 0.3.32. The gegl_tile_backend_swap_constructed function in buffer/gegl-tile-backend-swap.c allows remote attackers to cause a denial of service (write access violation) or possibly have unspecified other impact via a malformed PNG file that is mishandled during a call to the babl_format_get_bytes_per_pixel function in babl-format.c in babl 0.1.46.

Created: 2022-07-04 Last update: 2022-11-19 00:36

The package has not entered testing even though the delay is over normal

The package has not entered testing even though the 5-day delay is over. Check why.

Created: 2022-11-24 Last update: 2022-12-01 02:42

2 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit c75d0e3dc7b440bd79457af80e249989233508b5
Author: Jeremy Bicha <jeremy.bicha@canonical.com>
Date:   Fri Nov 18 13:01:16 2022 -0500

    debian/control.in: Move asciidoc-base to Build-Depends-Indep

commit cbc59cf59bd65da209bb7dc1d2a290e8878ea739
Author: Simon McVittie <smcv@debian.org>
Date:   Wed Sep 7 09:47:05 2022 +0100

    d/control.in: Drop compatibility with old libgdk-pixbuf2.0-dev package
    
    libgdk-pixbuf-2.0-dev has been available since bullseye.

Created: 2022-09-07 Last update: 2022-11-24 13:10

3 low-priority security issues in bullseye low

There are 3 open security issues in bullseye.

1 issue left for the package maintainer to handle:

CVE-2021-45463: (needs triaging) load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIMP releases before 2.10.30; however, this does not imply that GIMP builds enable the vulnerable feature.

You can find information about how to handle this issue in the security team's documentation.

2 ignored issues:

CVE-2018-10111: An issue was discovered in GEGL through 0.3.32. The render_rectangle function in process/gegl-processor.c has unbounded memory allocation, leading to a denial of service (application crash) upon allocation failure.
CVE-2018-10112: An issue was discovered in GEGL through 0.3.32. The gegl_tile_backend_swap_constructed function in buffer/gegl-tile-backend-swap.c allows remote attackers to cause a denial of service (write access violation) or possibly have unspecified other impact via a malformed PNG file that is mishandled during a call to the babl_format_get_bytes_per_pixel function in babl-format.c in babl 0.1.46.

Created: 2022-07-04 Last update: 2022-11-19 00:36

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2020-08-19 Last update: 2020-08-19 16:33

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.6.1 instead of 4.5.1).

Created: 2021-08-18 Last update: 2022-11-19 02:31

testing migrations

excuses:
- Migration status for gegl (1:0.4.38-1 to 1:0.4.40-1): BLOCKED: Maybe temporary, maybe blocked but Britney is missing information (check below)
- Issues preventing migration:
- ∙ ∙ missing build on mipsel
- Additional info:
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/g/gegl.html
- ∙ ∙ autopkgtest for gegl/1:0.4.40-1: amd64: No test results, arm64: No test results, armel: No test results, armhf: No test results, i386: No test results, ppc64el: No test results, s390x: No test results
- ∙ ∙ 12 days old (needed 5 days)
- Not considered

news

[rss feed]

[2022-11-18] Accepted gegl 1:0.4.40-1 (source) into unstable (Jeremy Bicha)
[2022-08-03] gegl 1:0.4.38-1 MIGRATED to testing (Debian testing watch)
[2022-07-28] Accepted gegl 1:0.4.38-1 (source) into unstable (Jeremy Bicha)
[2022-06-30] gegl 1:0.4.36-3.1 MIGRATED to testing (Debian testing watch)
[2022-06-23] Accepted gegl 1:0.4.36-3.1 (source) into unstable (Sebastian Ramacher)
[2022-03-31] gegl 1:0.4.36-3 MIGRATED to testing (Debian testing watch)
[2022-03-25] Accepted gegl 1:0.4.36-3 (source) into unstable (Jeremy Bicha)
[2022-03-25] Accepted gegl 1:0.4.36-2 (source) into unstable (Jeremy Bicha)
[2022-03-24] Accepted gegl 1:0.4.36-1 (source) into unstable (Jeremy Bicha)
[2021-12-29] gegl 1:0.4.34-1 MIGRATED to testing (Debian testing watch)
[2021-12-26] Accepted gegl 1:0.4.34-1 (source) into unstable (Jeremy Bicha)
[2021-11-02] gegl 1:0.4.32-2 MIGRATED to testing (Debian testing watch)
[2021-10-28] Accepted gegl 1:0.4.32-2 (source) into unstable (Simon McVittie)
[2021-09-22] gegl 1:0.4.32-1 MIGRATED to testing (Debian testing watch)
[2021-09-09] Accepted gegl 1:0.4.32-1 (source) into unstable (Simon McVittie)
[2021-07-18] Accepted gegl 1:0.4.30-1 (source) into unstable (Jeremy Bicha)
[2021-03-18] Accepted gegl 1:0.4.28-3 (source) into unstable (Jeremy Bicha)
[2021-03-13] Accepted gegl 1:0.4.28-2 (source) into unstable (Jeremy Bicha)
[2021-03-13] Accepted gegl 1:0.4.28-1 (source) into unstable (Jeremy Bicha)
[2020-11-29] gegl 1:0.4.26-2 MIGRATED to testing (Debian testing watch)
[2020-11-29] gegl 1:0.4.26-2 MIGRATED to testing (Debian testing watch)
[2020-11-24] Accepted gegl 1:0.4.26-2 (source) into unstable (Simon McVittie)
[2020-08-31] gegl 1:0.4.26-1 MIGRATED to testing (Debian testing watch)
[2020-08-26] Accepted gegl 1:0.4.26-1 (source) into unstable (Simon McVittie)
[2020-07-01] gegl 0.4.24-1 MIGRATED to testing (Debian testing watch)
[2020-06-13] Accepted gegl 0.4.24-1 (source) into unstable (Jeremy Bicha)
[2020-03-23] gegl 0.4.22-3 MIGRATED to testing (Debian testing watch)
[2020-03-18] Accepted gegl 0.4.22-3 (source) into unstable (Simon McVittie)
[2020-03-17] Accepted gegl 0.4.22-2 (source) into unstable (Simon McVittie)
[2020-02-22] Accepted gegl 0.4.22-1 (source) into unstable (Andreas Henriksson)

bugs [bug history graph]

all: 5
RC: 0
I&N: 5
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (3, 63)
buildd: logs, checks, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
screenshots
l10n (-, 75)
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1:0.4.38-1build1
4 bugs