Debian Package Tracker

general

source: libvorbis (main)
version: 1.3.6-2
maintainer: Debian Multimedia Maintainers (archive) (DMD)
uploaders: Petter Reinholdtsen [DMD] – Ralph Giles [DMD] – Martin Steghöfer [DMD]
arch: any
std-ver: 4.3.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1.3.4-2+deb8u1
o-o-sec: 1.3.4-2+deb8u2
oldstable: 1.3.5-4+deb9u2
old-sec: 1.3.5-4+deb9u2
stable: 1.3.6-2
testing: 1.3.6-2
unstable: 1.3.6-2

versioned links

1.3.4-2+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.3.4-2+deb8u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.3.5-4+deb9u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.3.6-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libvorbis-dev
libvorbis0a
libvorbisenc2
libvorbisfile3 (1 bugs: 0, 1, 0, 0)

action needed

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2019-12-09 Last update: 2019-12-15 05:33

3 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 38312bc7221c225fd1e249c8fe43163fd4b43f60
Author: Ondřej Nový <onovy@debian.org>
Date:   Fri Oct 18 16:49:30 2019 +0200

    Bump Standards-Version to 4.4.1

commit ec77f2b4425cc6fee0fa491d649d453062c6cd57
Author: Ondřej Nový <onovy@debian.org>
Date:   Sat Jul 20 00:45:29 2019 +0200

    Bump Standards-Version to 4.4.0

commit 98a89866b49e7477444bc7a9f3c51aac79d4a7ef
Author: Ondřej Nový <onovy@debian.org>
Date:   Sat Jul 20 00:45:29 2019 +0200

    Use debhelper-compat instead of debian/compat

Created: 2019-07-20 Last update: 2019-12-14 03:25

2 ignored security issues in jessie low

There are 2 open security issues in jessie.

2 issues skipped by the security teams:

CVE-2017-14633: In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis().
CVE-2017-11333: The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM) via a crafted wav file.

Please fix them.

Created: 2017-08-01 Last update: 2019-11-28 03:10

3 ignored security issues in stretch low

There are 3 open security issues in stretch.

3 issues skipped by the security teams:

CVE-2018-10392: mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file.
CVE-2018-10393: bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.
CVE-2017-14160: The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact via a crafted mp4 file.

Please fix them.

Created: 2017-08-01 Last update: 2019-11-28 03:10

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2014-07-02 Last update: 2014-08-31 18:13

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.4.1 instead of 4.3.0).

Created: 2019-07-08 Last update: 2019-09-29 23:40

news

[rss feed]

[2019-11-27] Accepted libvorbis 1.3.4-2+deb8u2 (source amd64) into oldoldstable (Thorsten Alteholz)
[2019-03-08] libvorbis 1.3.6-2 MIGRATED to testing (Debian testing watch)
[2019-02-25] Accepted libvorbis 1.3.6-2 (source) into unstable (Florian Schlichting)
[2018-04-30] Accepted libvorbis 1.3.2-1.3+deb7u1 (source amd64) into oldoldstable (Antoine Beaupré)
[2018-03-27] libvorbis 1.3.6-1 MIGRATED to testing (Debian testing watch)
[2018-03-22] Accepted libvorbis 1.3.6-1 (source) into unstable (Petter Reinholdtsen)
[2018-03-22] libvorbis 1.3.5-4.2 MIGRATED to testing (Debian testing watch)
[2018-03-17] Accepted libvorbis 1.3.4-2+deb8u1 (source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Salvatore Bonaccorso)
[2018-03-17] Accepted libvorbis 1.3.5-4+deb9u2 (source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2018-03-17] Accepted libvorbis 1.3.5-4+deb9u1 (source amd64) into proposed-updates->stable-new, proposed-updates (Moritz Muehlenhoff) (signed by: Moritz Mühlenhoff)
[2018-03-17] Accepted libvorbis 1.3.5-4.2 (source) into unstable (Salvatore Bonaccorso)
[2018-03-16] Accepted libvorbis 1.3.5-4+deb9u2 (source) into stable->embargoed, stable (Salvatore Bonaccorso)
[2018-03-16] Accepted libvorbis 1.3.4-2+deb8u1 (source) into oldstable->embargoed, oldstable (Salvatore Bonaccorso)
[2018-01-02] libvorbis 1.3.5-4.1 MIGRATED to testing (Debian testing watch)
[2017-12-27] Accepted libvorbis 1.3.5-4.1 (source) into unstable (Guido Günther)
[2017-01-02] libvorbis 1.3.5-4 MIGRATED to testing (Debian testing watch)
[2016-12-22] Accepted libvorbis 1.3.5-4 (source) into unstable (Petter Reinholdtsen)
[2016-02-17] libvorbis 1.3.5-3 MIGRATED to testing (Debian testing watch)
[2016-02-11] Accepted libvorbis 1.3.5-3 (source) into unstable (Petter Reinholdtsen)
[2016-02-07] Accepted libvorbis 1.3.5-2 (source) into unstable (Petter Reinholdtsen)
[2016-02-06] Accepted libvorbis 1.3.5-1 (source) into unstable (Petter Reinholdtsen)
[2015-10-03] libvorbis 1.3.4-3 MIGRATED to testing (Britney)
[2015-09-22] Accepted libvorbis 1.3.4-3 (source) into unstable (Petter Reinholdtsen) (signed by: Matteo F. Vescovi)
[2014-11-15] libvorbis 1.3.4-2 MIGRATED to testing (Britney)
[2014-11-04] libvorbis 1.3.4-1 MIGRATED to testing (Britney)
[2014-11-04] Accepted libvorbis 1.3.4-2 (source amd64) into unstable (Petter Reinholdtsen)
[2014-10-24] Accepted libvorbis 1.3.4-1 (source amd64) into unstable (Petter Reinholdtsen)
[2014-10-24] libvorbis 1.3.2-1.5 MIGRATED to testing (Britney)
[2014-10-24] Accepted libvorbis 1.3.2-2 (source amd64) into unstable (Petter Reinholdtsen)
[2014-10-14] Accepted libvorbis 1.3.2-1.5 (source amd64) into unstable (Petter Reinholdtsen)

bugs [bug history graph]

all: 2
RC: 0
I&N: 1
M&W: 1
F&P: 0
patch: 1

links

homepage
lintian
buildd: logs, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.3.6-2ubuntu1
4 bugs (1 patch)
patches for 1.3.6-2ubuntu1