Debian Package Tracker

general

source: htslib (main)
version: 1.7-2
maintainer: Debian Med Packaging Team (archive) [DMD] [LowNMU]
uploaders: Charles Plessy [DMD] – Andreas Tille [DMD]
arch: all any
std-ver: 4.1.3
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 1.1-1
old-bpo: 1.3.2-2~bpo8+1
stable: 1.3.2-2
stable-bpo: 1.7-2~bpo9+1
testing: 1.7-2
unstable: 1.7-2
exp: 1.9-1

versioned links

1.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.3.2-2~bpo8+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.3.2-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.7-2~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.7-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.8-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.9-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

htslib-test
libhts-dev
libhts-private-dev
libhts2
tabix

action needed

A new upstream version is available: 1.9 high

A new upstream version 1.9 is available, you should consider packaging it.

Created: 2018-04-04 Last update: 2018-08-14 02:17

lintian reports 6 errors and 8 warnings high

Lintian reports 6 errors and 8 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2015-03-07 Last update: 2018-07-29 07:51

3 security issues in sid high

There are 3 open security issues in sid.

3 important issues:

CVE-2018-13845: An issue has been found in HTSlib 1.8. It is a buffer over-read in sam_parse1 in sam.c.
CVE-2018-13844: An issue has been found in HTSlib 1.8. It is a memory leak in fai_read in faidx.c.
CVE-2018-13843: An issue has been found in HTSlib 1.8. It is a memory leak in bgzf_getline in bgzf.c.

Please fix them.

Created: 2018-07-11 Last update: 2018-07-20 08:13

3 security issues in buster high

There are 3 open security issues in buster.

3 important issues:

CVE-2018-13845: An issue has been found in HTSlib 1.8. It is a buffer over-read in sam_parse1 in sam.c.
CVE-2018-13844: An issue has been found in HTSlib 1.8. It is a memory leak in fai_read in faidx.c.
CVE-2018-13843: An issue has been found in HTSlib 1.8. It is a memory leak in bgzf_getline in bgzf.c.

Please fix them.

Created: 2018-07-11 Last update: 2018-07-20 08:13

Depends on packages which need a new maintainer normal

The packages that htslib depends on which need a new maintainer are:

dh-exec (#851746)
- Build-Depends: dh-exec

Created: 2017-12-02 Last update: 2018-08-14 02:26

4 new commits since last upload, time to release an update? normal

vcswatch reports that this package seems to have new commits in its VCS. You should consider updating the debian/changelog and uploading this new version into the archive.

Created: 2018-07-29 Last update: 2018-07-30 02:22

4 ignored security issues in stretch low

There are 4 open security issues in stretch.

4 issues skipped by the security teams:

CVE-2018-13845: An issue has been found in HTSlib 1.8. It is a buffer over-read in sam_parse1 in sam.c.
CVE-2018-13844: An issue has been found in HTSlib 1.8. It is a memory leak in fai_read in faidx.c.
CVE-2018-13843: An issue has been found in HTSlib 1.8. It is a memory leak in bgzf_getline in bgzf.c.
CVE-2017-1000206: samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution

Please fix them.

Created: 2017-11-18 Last update: 2018-07-20 08:13

4 ignored security issues in jessie low

There are 4 open security issues in jessie.

4 issues skipped by the security teams:

CVE-2018-13845: An issue has been found in HTSlib 1.8. It is a buffer over-read in sam_parse1 in sam.c.
CVE-2018-13844: An issue has been found in HTSlib 1.8. It is a memory leak in fai_read in faidx.c.
CVE-2018-13843: An issue has been found in HTSlib 1.8. It is a memory leak in bgzf_getline in bgzf.c.
CVE-2017-1000206: samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution

Please fix them.

Created: 2017-11-18 Last update: 2018-07-20 08:13

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.1.5 instead of 4.1.3).

Created: 2018-04-16 Last update: 2018-07-29 01:19

news

[rss feed]

[2018-07-28] Accepted htslib 1.9-1 (source all amd64) into experimental (Steffen Moeller)
[2018-05-22] Accepted htslib 1.7-2~bpo9+1 (source all amd64) into stretch-backports, stretch-backports (Andreas Tille)
[2018-05-03] Accepted htslib 1.8-1 (source) into experimental (Andreas Tille)
[2018-02-19] htslib 1.7-2 MIGRATED to testing (Debian testing watch)
[2018-02-19] htslib 1.7-2 MIGRATED to testing (Debian testing watch)
[2018-02-14] Accepted htslib 1.7-2 (source) into unstable (Andreas Tille)
[2018-02-12] Accepted htslib 1.7-1 (source all amd64) into unstable (Steffen Moeller)
[2017-12-27] htslib 1.6-4 MIGRATED to testing (Debian testing watch)
[2017-12-21] Accepted htslib 1.6-4 (source) into unstable (Graham Inggs)
[2017-12-20] Accepted htslib 1.6-3 (source) into unstable (Graham Inggs)
[2017-12-20] htslib 1.6-2 MIGRATED to testing (Debian testing watch)
[2017-12-14] Accepted htslib 1.6-2 (source) into unstable (Andreas Tille)
[2017-12-11] Accepted htslib 1.6-1 (source) into experimental (Andreas Tille)
[2017-12-11] Accepted htslib 1.5-6 (source) into unstable (Andreas Tille)
[2017-12-10] Accepted htslib 1.5-5 (source all amd64) into unstable, unstable (Andreas Tille)
[2017-11-26] htslib 1.5-4 MIGRATED to testing (Debian testing watch)
[2017-11-20] Accepted htslib 1.5-4 (source) into unstable (Andreas Tille)
[2017-11-10] Accepted htslib 1.5-3 (source) into unstable (Diane Trout)
[2017-11-08] Accepted htslib 1.5-2 (source all amd64) into unstable (Andreas Tille)
[2017-10-31] htslib 1.5-1 MIGRATED to testing (Debian testing watch)
[2017-08-04] Accepted htslib 1.5-1 (source all amd64) into unstable (Matthias Klumpp)
[2017-07-24] htslib 1.4.1-5 MIGRATED to testing (Debian testing watch)
[2017-07-23] Accepted htslib 1.4.1-5 (source) into unstable (Graham Inggs)
[2017-07-17] Accepted htslib 1.4.1-4 (source) into unstable (Graham Inggs)
[2017-07-17] Accepted htslib 1.4.1-3 (source all amd64) into unstable (Sascha Steinbiss)
[2017-06-18] Accepted htslib 1.4.1-2 (source) into unstable (Andreas Tille)
[2017-06-18] Accepted htslib 1.4.1-1 (source all amd64) into unstable (Andreas Tille)
[2017-06-09] Accepted htslib 1.3.2-2~bpo8+1 (source amd64 all) into jessie-backports->backports-policy, jessie-backports (Andreas Tille)
[2017-05-19] Accepted htslib 1.4-3 (source all amd64) into experimental (Andreas Tille)
[2017-05-02] Accepted htslib 1.4-2 (source all amd64) into experimental (Andreas Tille)

bugs [bug history graph]

all: 1
RC: 1
I&N: 0
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (6, 8)
buildd: logs, exp, clang, reproducibility
popcon
debci
browse source code
edit tags
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.7-2