vcswatch reports that
this package seems to have a new changelog entry (version
1.3.13-8, distribution
UNRELEASED) and new commits
in its VCS. You should consider whether it's time to make
an upload.
Here are the relevant commit messages:
commit 45f38b5c91b4e8de92d4b8defefe457f719077c9
Author: Rene Engelhard <rene@debian.org>
Date: Tue May 7 19:45:23 2019 +0200
apply patch from Helmut Grohne to annotate Build-Depends: python3-fonttools with <!nocheck>. (Closes: #928545)
CVE-2018-7999: In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file.
CVE-2018-7999: In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file.
Standards version of the package is outdated.
wishlist
The package should be updated to follow the last version of Debian Policy
(Standards-Version 4.4.0 instead of
4.1.0).
testing migrations
This package is part of the ongoing testing transition known as python2-rm.
Please avoid uploads unrelated to this transition, they would
likely delay it and require supplementary work from the release
managers. On the other hand, if your package has problems
preventing it to migrate to testing, please fix them
as soon as possible.
You can probably find supplementary information in the
debian-release
archives or in the corresponding
release.debian.org
bug.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/g/graphite2.png){kind=link}