gnuchess - Debian Package Tracker

general

source: gnuchess (main)
version: 6.2.7-1
maintainer: Vincent Legout (DMD)
arch: any
std-ver: 4.5.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 6.2.5-1
oldstable: 6.2.7-1
stable: 6.2.7-1
testing: 6.2.7-1
unstable: 6.2.7-1

versioned links

6.2.5-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
6.2.7-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

gnuchess (10 bugs: 1, 8, 1, 0)

action needed

Marked for autoremoval on 25 November: #986801 high

Version 6.2.7-1 of gnuchess is marked for autoremoval from testing on Mon 25 Nov 2024. It is affected by #986801. The removal of gnuchess will also cause the removal of (transitive) reverse dependency: gnuchess-book. You should try to prevent the removal by fixing these RC bugs.

Created: 2024-10-27 Last update: 2024-11-09 02:01

A new upstream version is available: 6.2.9 high

A new upstream version 6.2.9 is available, you should consider packaging it.

Created: 2024-08-03 Last update: 2024-11-08 22:01

1 security issue in trixie high

There is 1 open security issue in trixie.

1 important issue:

CVE-2021-30184: GNU Chess 6.2.7 allows attackers to execute arbitrary code via crafted PGN (Portable Game Notation) data. This is related to a buffer overflow in the use of a .tmp.epd temporary file in the cmd_pgnload and cmd_pgnreplay functions in frontend/cmd.cc.

Created: 2023-06-11 Last update: 2024-08-15 08:30

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2021-30184: GNU Chess 6.2.7 allows attackers to execute arbitrary code via crafted PGN (Portable Game Notation) data. This is related to a buffer overflow in the use of a .tmp.epd temporary file in the cmd_pgnload and cmd_pgnreplay functions in frontend/cmd.cc.

Created: 2022-07-04 Last update: 2024-08-15 08:30

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 6.2.7-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 23514d536d645c78a9b5334a71c4c125436661f7
Merge: 52e1bf5 2a47bea
Author: Jelmer Vernooĳ <jelmer@debian.org>
Date:   Tue Nov 1 12:45:29 2022 +0000

    Merge branch 'lintian-fixes' into 'master'
    
    Fix some issues reported by lintian
    
    See merge request debian/gnuchess!1

commit 2a47beaf6c0d0a5794c2c39ed1e1a76ca7473d1a
Author: Jenkins <jenkins@jenkins.debian.net>
Date:   Fri Oct 15 11:06:10 2021 +0000

    Update standards version to 4.6.0, no changes needed.
    
    Changes-By: lintian-brush
    Fixes: lintian: out-of-date-standards-version
    See-also: https://lintian.debian.org/tags/out-of-date-standards-version.html

commit 518fa8adb41c6314e910b225bde668d233b108bb
Author: Jenkins <jenkins@jenkins.debian.net>
Date:   Fri Oct 15 11:05:50 2021 +0000

    Drop unnecessary dependency on dh-autoreconf.
    
    Changes-By: lintian-brush

commit da8a11b9b83f694ce3f4fabb60d45699cf675e46
Author: Jenkins <jenkins@jenkins.debian.net>
Date:   Fri Oct 15 11:05:29 2021 +0000

    Set upstream metadata fields: Bug-Submit (from ./configure).
    
    Changes-By: lintian-brush
    Fixes: lintian: upstream-metadata-file-is-missing
    See-also: https://lintian.debian.org/tags/upstream-metadata-file-is-missing.html

commit 6fb11b810c5da78b53924049b16188a4da93b989
Author: Jenkins <jenkins@jenkins.debian.net>
Date:   Fri Oct 15 11:05:02 2021 +0000

    Enarmor upstream signing key.
    
    Changes-By: lintian-brush

Created: 2022-11-01 Last update: 2024-11-08 17:03

1 low-priority security issue in bookworm low

There is 1 open security issue in bookworm.

1 issue left for the package maintainer to handle:

CVE-2021-30184: (needs triaging) GNU Chess 6.2.7 allows attackers to execute arbitrary code via crafted PGN (Portable Game Notation) data. This is related to a buffer overflow in the use of a .tmp.epd temporary file in the cmd_pgnload and cmd_pgnreplay functions in frontend/cmd.cc.

You can find information about how to handle this issue in the security team's documentation.

Created: 2023-06-10 Last update: 2024-08-15 08:30

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.0 instead of 4.5.0).

Created: 2020-11-17 Last update: 2024-04-07 13:15

news

[rss feed]

[2020-10-29] gnuchess 6.2.7-1 MIGRATED to testing (Debian testing watch)
[2020-10-24] Accepted gnuchess 6.2.7-1 (source) into unstable (Vincent Legout)
[2017-08-07] gnuchess 6.2.5-1 MIGRATED to testing (Debian testing watch)
[2017-08-01] Accepted gnuchess 6.2.5-1 (source) into unstable (Vincent Legout)
[2016-11-16] gnuchess 6.2.4-1 MIGRATED to testing (Debian testing watch)
[2016-11-11] Accepted gnuchess 6.2.4-1 (source) into unstable (Vincent Legout)
[2016-09-11] gnuchess 6.2.2-2 MIGRATED to testing (Debian testing watch)
[2016-09-05] Accepted gnuchess 6.2.2-2 (source) into unstable (Vincent Legout)
[2016-01-16] gnuchess 6.2.2-1 MIGRATED to testing (Debian testing watch)
[2016-01-10] Accepted gnuchess 6.2.2-1 (source) into unstable (Vincent Legout)
[2015-06-01] Accepted gnuchess 6.2.1-1 (source amd64) into unstable (Vincent Legout)
[2014-08-07] gnuchess 6.1.2-1 MIGRATED to testing (Britney)
[2014-08-01] Accepted gnuchess 6.1.2-1 (source amd64) into unstable (Vincent Legout)
[2014-01-11] gnuchess 6.1.1-1 MIGRATED to testing (Debian testing watch)
[2013-12-31] Accepted gnuchess 6.1.1-1 (source amd64) (Vincent Legout)
[2013-05-25] gnuchess 6.0.3-1 MIGRATED to testing (Debian testing watch)
[2013-05-14] Accepted gnuchess 6.0.3-1 (source amd64) (Vincent Legout)
[2012-03-17] gnuchess 6.0.2-1 MIGRATED to testing (Debian testing watch)
[2012-03-06] Accepted gnuchess 6.0.2-1 (source amd64) (Vincent Legout)
[2009-12-18] gnuchess 5.07-7 MIGRATED to testing (Debian testing watch)
[2009-12-07] Accepted gnuchess 5.07-7 (source amd64) (Bradley Smith) (signed by: Bradley John Smith)
[2009-10-08] gnuchess 5.07-6 MIGRATED to testing (Debian testing watch)
[2009-09-27] Accepted gnuchess 5.07-6 (source amd64) (Bradley Smith) (signed by: Bradley John Smith)
[2009-02-16] gnuchess 5.07-5 MIGRATED to testing (Debian testing watch)
[2008-10-26] Accepted gnuchess 5.07-5 (source amd64) (Bradley Smith) (signed by: Bradley John Smith)
[2008-06-05] gnuchess 5.07-4.1 MIGRATED to testing (Debian testing watch)
[2008-05-26] Accepted gnuchess 5.07-4.1 (source i386) (Peter Eisentraut)
[2005-12-11] gnuchess 5.07-4 MIGRATED to testing (Debian testing watch)
[2005-11-29] Accepted gnuchess 5.07-4 (source powerpc) (Lukas Geyer)
[2005-03-04] Accepted gnuchess 5.07-3 (powerpc source) (Lukas Geyer)

bugs [bug history graph]

all: 10 11
RC: 1
I&N: 7 8
M&W: 2
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
screenshots
l10n (-, 87)

ubuntu

[Information about Ubuntu for Debian Developers]

version: 6.2.7-1build1
2 bugs