Debian Package Tracker

general

source: jackd2 (main)
version: 1.9.12~dfsg-2
maintainer: Debian Multimedia Maintainers (archive) (DMD)
uploaders: Jonas Smedegaard [DMD] – Adrian Knoth [DMD] [DM] – Reinhard Tartler [DMD]
arch: any
std-ver: 3.9.8
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1.9.10+20140719git3eb0ae6a~dfsg-2
oldstable: 1.9.10+20150825git1ed50c92~dfsg-5
stable: 1.9.12~dfsg-2
testing: 1.9.12~dfsg-2
unstable: 1.9.12~dfsg-2

versioned links

1.9.10+20140719git3eb0ae6a~dfsg-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.9.10+20150825git1ed50c92~dfsg-5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.9.12~dfsg-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

jackd2 (19 bugs: 0, 14, 5, 0)
jackd2-firewire
libjack-jackd2-0
libjack-jackd2-dev (1 bugs: 0, 1, 0, 0)

action needed

A new upstream version is available: 1.9.13 high

A new upstream version 1.9.13 is available, you should consider packaging it.

Created: 2019-10-07 Last update: 2019-10-18 16:04

Standards version of the package is outdated. high

The package is severely out of date with respect to the Debian Policy. The package should be updated to follow the last version of Debian Policy (Standards-Version 4.4.1 instead of 3.9.8).

Created: 2016-07-25 Last update: 2019-09-29 23:40

lintian reports 1 error and 28 warnings high

Lintian reports 1 error and 28 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2019-08-24 Last update: 2019-08-24 02:15

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2019-13351: posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 (as distributed with alsa-plugins 1.1.7 and later) has a "double file descriptor close" issue during a failed connection attempt when jackd2 is not running. Exploitation success depends on multithreaded timing of that double close, which can result in unintended information disclosure, crashes, or file corruption due to having the wrong file associated with the file descriptor.

Please fix it.

Created: 2019-07-06 Last update: 2019-07-13 06:36

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2019-13351: posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 (as distributed with alsa-plugins 1.1.7 and later) has a "double file descriptor close" issue during a failed connection attempt when jackd2 is not running. Exploitation success depends on multithreaded timing of that double close, which can result in unintended information disclosure, crashes, or file corruption due to having the wrong file associated with the file descriptor.

Please fix it.

Created: 2019-07-07 Last update: 2019-07-13 06:36

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2019-04-01 Last update: 2019-10-18 16:32

6 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 6442481243e0265da6dc1171d2dff60df63cfb74
Author: Ondřej Nový <onovy@debian.org>
Date:   Sat Jul 20 01:06:47 2019 +0200

    Use debhelper-compat instead of debian/compat

commit 2171b06763360de0d0f4c32511ec3b5094b22e24
Author: Felipe Sateler <fsateler@debian.org>
Date:   Mon Apr 16 13:54:47 2018 -0300

    Change maintainer address to debian-multimedia@lists.debian.org

commit 92bf1e306bc036507130c7d97a8294e64e83791b
Author: Ondřej Nový <onovy@debian.org>
Date:   Mon Mar 12 23:37:05 2018 +0100

    d/control: Remove trailing whitespaces

commit 822c1f8aa229f3bfacadcabf1cddf26ced40c060
Author: Adrian Knoth <adi@drcomp.erfurt.thur.de>
Date:   Sun Feb 25 22:18:00 2018 +0100

    Remove obsolete patch packed-structs.patch
    
    We're in sync with upstream.

commit b8f0455df4b9c7cb5b1dd67cdabc5e2ecb8b3941
Author: Adrian Knoth <adi@drcomp.erfurt.thur.de>
Date:   Sun Feb 25 22:17:39 2018 +0100

    Remove obsolete gcc7-ftbfs.patch
    
    We're in sync with upstream.

commit a67c0109838f8448ee58367645dd216597a55054
Author: Adrian Knoth <adi@drcomp.erfurt.thur.de>
Date:   Sun Feb 25 22:17:15 2018 +0100

    Remove obsolete gcc6-ftbfs.patch
    
    We're in sync with upstream.

Created: 2018-02-26 Last update: 2019-10-13 13:53

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2019-13351: posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 (as distributed with alsa-plugins 1.1.7 and later) has a "double file descriptor close" issue during a failed connection attempt when jackd2 is not running. Exploitation success depends on multithreaded timing of that double close, which can result in unintended information disclosure, crashes, or file corruption due to having the wrong file associated with the file descriptor.

Please fix it.

Created: 2019-07-06 Last update: 2019-07-13 06:36

1 ignored security issue in buster low

There is 1 open security issue in buster.

1 issue skipped by the security teams:

CVE-2019-13351: posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 (as distributed with alsa-plugins 1.1.7 and later) has a "double file descriptor close" issue during a failed connection attempt when jackd2 is not running. Exploitation success depends on multithreaded timing of that double close, which can result in unintended information disclosure, crashes, or file corruption due to having the wrong file associated with the file descriptor.

Please fix it.

Created: 2019-07-06 Last update: 2019-07-13 06:36

1 ignored security issue in jessie low

There is 1 open security issue in jessie.

1 issue skipped by the security teams:

CVE-2019-13351: posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 (as distributed with alsa-plugins 1.1.7 and later) has a "double file descriptor close" issue during a failed connection attempt when jackd2 is not running. Exploitation success depends on multithreaded timing of that double close, which can result in unintended information disclosure, crashes, or file corruption due to having the wrong file associated with the file descriptor.

Please fix it.

Created: 2019-07-06 Last update: 2019-07-13 06:36

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2016-12-05 Last update: 2016-12-05 00:56

news

[rss feed]

[2018-03-03] jackd2 1.9.12~dfsg-2 MIGRATED to testing (Debian testing watch)
[2018-02-25] Accepted jackd2 1.9.12~dfsg-2 (source) into unstable (Adrian Knoth)
[2018-02-25] Accepted jackd2 1.9.12~dfsg-1 (source amd64) into unstable (Adrian Knoth)
[2018-02-22] Accepted jackd2 1.9.10+20150825git1ed50c92~dfsg-6 (source) into unstable (Mattia Rizzolo)
[2017-04-01] jackd2 1.9.10+20150825git1ed50c92~dfsg-5 MIGRATED to testing (Debian testing watch)
[2017-03-30] Accepted jackd2 1.9.10+20150825git1ed50c92~dfsg-5 (source) into unstable (Reinhard Tartler)
[2016-12-15] jackd2 1.9.10+20150825git1ed50c92~dfsg-4 MIGRATED to testing (Debian testing watch)
[2016-12-04] Accepted jackd2 1.9.10+20150825git1ed50c92~dfsg-4 (source) into unstable (James Cowgill)
[2016-10-25] jackd2 1.9.10+20150825git1ed50c92~dfsg-3 MIGRATED to testing (Debian testing watch)
[2016-10-19] Accepted jackd2 1.9.10+20150825git1ed50c92~dfsg-3 (source) into unstable (James Cowgill)
[2016-07-30] jackd2 1.9.10+20150825git1ed50c92~dfsg-2 MIGRATED to testing (Debian testing watch)
[2016-07-25] Accepted jackd2 1.9.10+20150825git1ed50c92~dfsg-2 (source) into unstable (Felipe Sateler)
[2015-09-06] jackd2 1.9.10+20150825git1ed50c92~dfsg-1 MIGRATED to testing (Britney)
[2015-08-25] Accepted jackd2 1.9.10+20150825git1ed50c92~dfsg-1 (source amd64) into unstable (Adrian Knoth)
[2015-07-25] jackd2 1.9.10+20140719git3eb0ae6a~dfsg-3 MIGRATED to testing (Britney)
[2015-07-19] Accepted jackd2 1.9.10+20140719git3eb0ae6a~dfsg-3 (source) into unstable (Sebastian Ramacher)
[2014-10-02] jackd2 1.9.10+20140719git3eb0ae6a~dfsg-2 MIGRATED to testing (Britney)
[2014-09-26] Accepted jackd2 1.9.10+20140719git3eb0ae6a~dfsg-2 (source amd64) into unstable (Adrian Knoth)
[2014-08-05] jackd2 1.9.10+20140719git3eb0ae6a~dfsg-1 MIGRATED to testing (Britney)
[2014-07-31] Accepted jackd2 1.9.10+20140719git3eb0ae6a~dfsg-1 (source amd64) into unstable (Adrian Knoth)
[2014-06-21] jackd2 1.9.10+20140610git97e0e80b~dfsg-1 MIGRATED to testing (Debian testing watch)
[2014-06-10] Accepted jackd2 1.9.10+20140610git97e0e80b~dfsg-1 (source amd64) (Adrian Knoth)
[2014-04-15] jackd2 1.9.9.5+20140404git3d7c67dc~dfsg-1 MIGRATED to testing (Debian testing watch)
[2014-04-04] Accepted jackd2 1.9.9.5+20140404git3d7c67dc~dfsg-1 (source amd64) (Adrian Knoth)
[2013-07-03] jackd2 1.9.9.5+20130622git7de15e7a-1 MIGRATED to testing (Debian testing watch)
[2013-06-22] Accepted jackd2 1.9.9.5+20130622git7de15e7a-1 (source amd64) (Adrian Knoth)
[2013-03-06] Accepted jackd2 1.9.9.5+20130306git47f3a68c-1 (source amd64) (Adrian Knoth)
[2013-01-27] Accepted jackd2 1.9.9.5+20130127git15950eb1-1 (source amd64) (Adrian Knoth)
[2012-12-10] jackd2 1.9.8~dfsg.4+20120529git007cdc37-5 MIGRATED to testing (Debian testing watch)
[2012-11-27] Accepted jackd2 1.9.8~dfsg.4+20120529git007cdc37-5 (source amd64) (Adrian Knoth)

bugs [bug history graph]

all: 24
RC: 0
I&N: 19
M&W: 5
F&P: 0
patch: 1

links

homepage
lintian (1, 28)
buildd: logs, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker
screenshots