Debian Package Tracker

general

source: lame (main)
version: 3.100-2
maintainer: Debian Multimedia Maintainers (archive) [DMD]
uploaders: Fabian Greffrath [DMD] – Reinhard Tartler [DMD]
arch: all any
std-ver: 4.1.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 3.99.5+repack1-7+deb8u2
oldstable: 3.99.5+repack1-9
stable: 3.100-2
testing: 3.100-2
unstable: 3.100-2

versioned links

3.99.5+repack1-7+deb8u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.99.5+repack1-9: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.100-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

lame (1 bugs: 0, 0, 1, 0)
lame-doc
libmp3lame-dev (2 bugs: 0, 0, 2, 0)
libmp3lame0

action needed

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug (2 if counting merged bugs), consider including or untagging them.

Created: 2019-04-01 Last update: 2019-07-23 21:35

6 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 790cdff1d5fd1c3d83468f24e73b402fb76ca1a1
Author: Ondřej Nový <onovy@debian.org>
Date:   Sat Jul 20 01:05:34 2019 +0200

    Use debhelper-compat instead of debian/compat

commit 3f7f382e10713f925aee1ddbd63b0f3d45dbf65c
Author: Ondřej Nový <onovy@debian.org>
Date:   Mon Oct 1 08:36:46 2018 +0200

    d/watch: Use https protocol

commit 6e347762b53a191e409c9bec6b4e6c2e641087a3
Author: Felipe Sateler <fsateler@debian.org>
Date:   Mon Apr 16 13:54:48 2018 -0300

    Change maintainer address to debian-multimedia@lists.debian.org

commit 3ef42a4664dd5728a6dcf68ab99b87c4b8c157f2
Author: Ondřej Nový <onovy@debian.org>
Date:   Mon Mar 12 23:36:38 2018 +0100

    d/changelog: Remove trailing whitespaces

commit 0f31f312f5e7a3c677d2dfa5c8bab63039b6a332
Author: Ondřej Nový <onovy@debian.org>
Date:   Mon Feb 19 10:16:03 2018 +0100

    d/control: Set Vcs-* to salsa.debian.org

commit 8b07b794f496fc1dfa56539b165eba8262ab28a7
Author: Ondřej Nový <onovy@debian.org>
Date:   Mon Feb 19 10:16:03 2018 +0100

    d/copyright: Change Format URL to correct one

The Vcs URL is using anonscm.debian.org. Please update it for the move to salsa.debian.org.

Created: 2018-02-20 Last update: 2019-07-22 23:51

lintian reports 3 warnings normal

Lintian reports 3 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2019-07-21 Last update: 2019-07-21 04:07

Multiarch hinter reports 1 issue(s) low

There are issues with the multiarch metadata for this package.

lame-doc could be marked Multi-Arch: foreign

Created: 2016-09-14 Last update: 2019-07-23 16:46

2 ignored security issues in jessie low

There are 2 open security issues in jessie.

2 issues skipped by the security teams:

CVE-2017-15019: LAME 3.99.5 has a NULL Pointer Dereference in the hip_decode_init function within libmp3lame/mpglib_interface.c via a malformed mpg file, because of an incorrect calloc call.
CVE-2017-13712: NULL Pointer Dereference in the id3v2AddAudioDuration function in libmp3lame/id3tag.c in LAME 3.99.5 allows attackers to perform Denial of Service by triggering a NULL first argument.

Please fix them.

Created: 2017-06-28 Last update: 2019-07-07 09:00

2 ignored security issues in stretch low

There are 2 open security issues in stretch.

2 issues skipped by the security teams:

CVE-2017-15019: LAME 3.99.5 has a NULL Pointer Dereference in the hip_decode_init function within libmp3lame/mpglib_interface.c via a malformed mpg file, because of an incorrect calloc call.
CVE-2017-13712: NULL Pointer Dereference in the id3v2AddAudioDuration function in libmp3lame/id3tag.c in LAME 3.99.5 allows attackers to perform Denial of Service by triggering a NULL first argument.

Please fix them.

Created: 2017-06-28 Last update: 2019-07-07 09:00

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.4.0 instead of 4.1.1).

Created: 2018-04-16 Last update: 2019-07-08 20:07

news

[rss feed]

[2018-06-17] Accepted lame 3.99.5+repack1-7+deb8u2 (source amd64 all) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Hugo Lefeuvre)
[2017-10-29] lame 3.100-2 MIGRATED to testing (Debian testing watch)
[2017-10-21] Accepted lame 3.100-2 (source amd64 all) into unstable (Fabian Greffrath)
[2017-10-20] Accepted lame 3.100-1 (source amd64 all) into unstable (Fabian Greffrath)
[2015-07-01] lame 3.99.5+repack1-9 MIGRATED to testing (Britney)
[2015-06-25] Accepted lame 3.99.5+repack1-9 (source amd64 all) into unstable, unstable (Fabian Greffrath)
[2015-06-23] Accepted lame 3.99.5+repack1-7+deb8u1 (source amd64 all) into proposed-updates->stable-new, proposed-updates (Fabian Greffrath)
[2015-06-16] lame 3.99.5+repack1-8 MIGRATED to testing (Britney)
[2015-06-11] Accepted lame 3.99.5+repack1-8 (source amd64 all) into unstable (Fabian Greffrath)
[2015-03-24] lame 3.99.5+repack1-7 MIGRATED to testing (Britney)
[2015-02-28] Accepted lame 3.99.5+repack1-3+deb7u1 (source amd64 all) into proposed-updates->stable-new, proposed-updates (Fabian Greffrath)
[2015-02-24] Accepted lame 3.99.5+repack1-7 (source amd64 all) into unstable (Fabian Greffrath)
[2015-02-15] lame 3.99.5+repack1-6 MIGRATED to testing (Britney)
[2015-02-09] Accepted lame 3.99.5+repack1-6 (source amd64 all) into unstable (Fabian Greffrath)
[2014-09-06] lame 3.99.5+repack1-5 MIGRATED to testing (Britney)
[2014-08-31] Accepted lame 3.99.5+repack1-5 (source amd64 all) into unstable (Sebastian Ramacher)
[2014-08-30] Accepted lame 3.99.5+repack1-4 (source amd64 all) into unstable (Sebastian Ramacher)
[2012-03-28] lame 3.99.5+repack1-3 MIGRATED to testing (Debian testing watch)
[2012-03-17] Accepted lame 3.99.5+repack1-3 (source all amd64) (Andres Mejia)
[2012-03-16] Accepted lame 3.99.5+repack1-2 (source all amd64) (Andres Mejia)
[2012-03-15] Accepted lame 3.99.5+repack1-1 (source all amd64) (Andres Mejia)
[2012-02-09] lame 3.99.4+repack1-1 MIGRATED to testing (Debian testing watch)
[2012-01-29] Accepted lame 3.99.4+repack1-1 (source all amd64) (Andres Mejia)
[2011-12-22] lame 3.99.3+repack1-1 MIGRATED to testing (Debian testing watch)
[2011-12-11] Accepted lame 3.99.3+repack1-1 (source all amd64) (Andres Mejia)
[2011-09-10] lame 3.98.4+repack2-6 MIGRATED to testing (Debian testing watch)
[2011-08-29] Accepted lame 3.98.4+repack2-6 (source all amd64) (Andres Mejia) (signed by: Reinhard Tartler)
[2011-08-12] lame 3.98.4+repack2-4 MIGRATED to testing (Debian testing watch)
[2011-08-02] Accepted lame 3.98.4+repack2-4 (source all amd64) (Andres Mejia)
[2011-07-30] Accepted lame 3.98.4+repack2-3 (source all amd64) (Reinhard Tartler)

bugs [bug history graph]

all: 2 3
RC: 0
I&N: 0
M&W: 2 3
F&P: 0
patch: 1 2

links

homepage
lintian (0, 3)
buildd: logs, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 3.100-2build1
9 bugs (1 patch)