Debian Package Tracker

general

source: gpac (main)
version: 0.5.2-426-gc5ad4e4+dfsg5-4
maintainer: Debian Multimedia Maintainers (archive) [DMD]
uploaders: Alessio Treglia [DMD] – Balint Reczey [DMD] – Reinhard Tartler [DMD]
arch: any
std-ver: 3.9.8
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.5.0~dfsg0-1
oldstable: 0.5.0+svn5324~dfsg1-1
old-sec: 0.5.0+svn5324~dfsg1-1+deb8u1
stable: 0.5.2-426-gc5ad4e4+dfsg5-3
testing: 0.5.2-426-gc5ad4e4+dfsg5-4
unstable: 0.5.2-426-gc5ad4e4+dfsg5-4

versioned links

0.5.0~dfsg0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.5.0+svn5324~dfsg1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.5.0+svn5324~dfsg1-1+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.5.2-426-gc5ad4e4+dfsg5-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.5.2-426-gc5ad4e4+dfsg5-4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

gpac
gpac-modules-base
libgpac-dev
libgpac4

action needed

A new upstream version is available: 0.7.1 high

A new upstream version 0.7.1 is available, you should consider packaging it.

Created: 2018-08-23 Last update: 2019-01-20 08:12

Standards version of the package is outdated. high

The package is severely out of date with respect to the Debian Policy. The package should be updated to follow the last version of Debian Policy (Standards-Version 4.3.0 instead of 3.9.8).

Created: 2018-04-16 Last update: 2018-12-23 17:15

3 security issues in sid high

There are 3 open security issues in sid.

3 important issues:

CVE-2018-7752: GPAC through 0.7.1 has a Buffer Overflow in the gf_media_avc_read_sps function in media_tools/av_parsers.c, a different vulnerability than CVE-2018-1000100.
CVE-2018-13005: An issue was discovered in MP4Box in GPAC 0.7.1. The function urn_Read in isomedia/box_code_base.c has a heap-based buffer over-read.
CVE-2018-13006: An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/box_dump.c function hdlr_dump.

Please fix them.

Created: 2018-03-08 Last update: 2018-08-22 06:49

3 security issues in buster high

There are 3 open security issues in buster.

3 important issues:

CVE-2018-7752: GPAC through 0.7.1 has a Buffer Overflow in the gf_media_avc_read_sps function in media_tools/av_parsers.c, a different vulnerability than CVE-2018-1000100.
CVE-2018-13005: An issue was discovered in MP4Box in GPAC 0.7.1. The function urn_Read in isomedia/box_code_base.c has a heap-based buffer over-read.
CVE-2018-13006: An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/box_dump.c function hdlr_dump.

Please fix them.

Created: 2018-03-08 Last update: 2018-08-22 06:49

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2018-10-01 Last update: 2019-01-20 10:05

1 new commit since last upload, time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 4a8cd6bba88953007cc428448ef398c1d3851751
Author: Balint Reczey <balint.reczey@canonical.com>
Date:   Sun Aug 5 22:58:16 2018 +0800

    Remove myself from Uploaders

Created: 2018-08-06 Last update: 2019-01-19 07:43

lintian reports 4 warnings normal

Lintian reports 4 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2018-07-23 Last update: 2018-07-23 01:32

3 ignored security issues in stretch low

There are 3 open security issues in stretch.

3 issues skipped by the security teams:

CVE-2018-7752: GPAC through 0.7.1 has a Buffer Overflow in the gf_media_avc_read_sps function in media_tools/av_parsers.c, a different vulnerability than CVE-2018-1000100.
CVE-2018-13005: An issue was discovered in MP4Box in GPAC 0.7.1. The function urn_Read in isomedia/box_code_base.c has a heap-based buffer over-read.
CVE-2018-13006: An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/box_dump.c function hdlr_dump.

Please fix them.

Created: 2018-03-08 Last update: 2018-08-22 06:49

1 ignored security issue in jessie low

There is 1 open security issue in jessie.

1 issue skipped by the security teams:

CVE-2018-7752: GPAC through 0.7.1 has a Buffer Overflow in the gf_media_avc_read_sps function in media_tools/av_parsers.c, a different vulnerability than CVE-2018-1000100.

Please fix it.

Created: 2018-03-08 Last update: 2018-08-22 06:49

Build log checks report 2 warnings low

Build log checks report 2 warnings

Created: 2016-04-09 Last update: 2016-04-09 19:00

news

[rss feed]

[2018-07-19] Accepted gpac 0.5.0+svn5324~dfsg1-1+deb8u1 (source) into oldstable (Brian May)
[2018-05-31] gpac 0.5.2-426-gc5ad4e4+dfsg5-4 MIGRATED to testing (Debian testing watch)
[2018-05-25] Accepted gpac 0.5.2-426-gc5ad4e4+dfsg5-4 (source) into unstable (James Cowgill)
[2016-08-10] gpac 0.5.2-426-gc5ad4e4+dfsg5-3 MIGRATED to testing (Debian testing watch)
[2016-08-04] Accepted gpac 0.5.2-426-gc5ad4e4+dfsg5-3 (source) into unstable (James Cowgill)
[2016-04-01] gpac 0.5.2-426-gc5ad4e4+dfsg5-2 MIGRATED to testing (Debian testing watch)
[2016-03-09] Accepted gpac 0.5.2-426-gc5ad4e4+dfsg5-2 (source) into unstable (Sebastian Ramacher)
[2015-07-15] gpac 0.5.2-426-gc5ad4e4+dfsg5-1 MIGRATED to testing (Britney)
[2015-07-09] Accepted gpac 0.5.2-426-gc5ad4e4+dfsg5-1 (source amd64) into unstable, unstable (Alessio Treglia)
[2015-07-04] gpac 0.5.2-426-gc5ad4e4~dfsg4-1 MIGRATED to testing (Britney)
[2015-06-28] Accepted gpac 0.5.2-426-gc5ad4e4~dfsg4-1 (source) into unstable (Balint Reczey)
[2014-08-06] gpac 0.5.0+svn5324~dfsg1-1 MIGRATED to testing (Britney)
[2014-07-31] Accepted gpac 0.5.0+svn5324~dfsg1-1 (source amd64) into unstable (Alessio Treglia)
[2014-07-19] gpac 0.5.0+svn5294~dfsg1-1 MIGRATED to testing (Britney)
[2014-07-08] Accepted gpac 0.5.0+svn5294~dfsg1-1 (source amd64) (Alessio Treglia)
[2014-07-07] Accepted gpac 0.5.0+svn5194~dfsg1-4 (source amd64) (Alessio Treglia)
[2014-06-04] gpac 0.5.0+svn5194~dfsg1-3 MIGRATED to testing (Debian testing watch)
[2014-05-30] Accepted gpac 0.5.0+svn5194~dfsg1-3 (source amd64) (Reinhard Tartler)
[2014-05-22] gpac 0.5.0+svn5194~dfsg1-2 MIGRATED to testing (Debian testing watch)
[2014-05-11] Accepted gpac 0.5.0+svn5194~dfsg1-2 (source amd64) (Reinhard Tartler)
[2014-04-06] Accepted gpac 0.5.0+svn5194~dfsg1-1 (source amd64) (Reinhard Tartler)
[2014-02-24] Accepted gpac 0.5.0+svn5104~dfsg1-1 (amd64 source) (Reinhard Tartler)
[2013-10-17] gpac 0.5.0+svn4288~dfsg1-4 MIGRATED to testing (Debian testing watch)
[2013-10-06] Accepted gpac 0.5.0+svn4288~dfsg1-4 (source amd64) (Alessio Treglia)
[2013-10-06] Accepted gpac 0.5.0+svn4288~dfsg1-3 (source amd64) (Alessio Treglia)
[2013-08-15] Accepted gpac 0.5.0+svn4288~dfsg1-2 (amd64 source) (Reinhard Tartler)
[2013-01-30] Accepted gpac 0.5.0+svn4288~dfsg1-1 (source amd64) (Alessio Treglia)
[2012-06-07] gpac 0.5.0~dfsg0-1 MIGRATED to testing (Debian testing watch)
[2012-05-27] Accepted gpac 0.5.0~dfsg0-1 (source amd64) (Alessio Treglia)
[2012-05-26] gpac 0.4.5+svn4035~dfsg0-1 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 6
RC: 0
I&N: 3
M&W: 3
F&P: 0
patch: 1

links

homepage
lintian (0, 4)
buildd: logs, checks, clang, reproducibility
popcon
browse source code
edit tags
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 0.5.2-426-gc5ad4e4+dfsg5-4build1
6 bugs