Debian Package Tracker

general

source: libvpx (main)
version: 1.8.1-2
maintainer: Debian Multimedia Maintainers (archive) (DMD)
uploaders: Ondřej Nový [DMD] – Sebastian Dröge [DMD]
arch: all any
std-ver: 4.4.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1.3.0-3+deb8u1
o-o-sec: 1.3.0-3+deb8u2
oldstable: 1.6.1-3+deb9u1
old-sec: 1.6.1-3+deb9u2
old-p-u: 1.6.1-3+deb9u2
stable: 1.7.0-3
stable-sec: 1.7.0-3+deb10u1
stable-p-u: 1.7.0-3+deb10u1
testing: 1.8.1-2
unstable: 1.8.1-2

versioned links

1.3.0-3+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.3.0-3+deb8u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.6.1-3+deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.6.1-3+deb9u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.7.0-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.7.0-3+deb10u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.8.1-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libvpx-dev (1 bugs: 0, 1, 0, 0)
libvpx-doc
libvpx6
vpx-tools

action needed

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2019-04-01 Last update: 2019-12-08 16:03

Depends on packages which need a new maintainer normal

The packages that libvpx depends on which need a new maintainer are:

dh-exec (#851746)
- Build-Depends: dh-exec

Created: 2019-11-22 Last update: 2019-12-08 14:52

1 new commit since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit aef21c8f99d1c9b4e60138b64d1b286e8d153049
Author: Ondřej Nový <onovy@debian.org>
Date:   Fri Oct 18 16:51:54 2019 +0200

    Bump Standards-Version to 4.4.1

Created: 2019-10-18 Last update: 2019-12-06 03:40

4 ignored security issues in jessie low

There are 4 open security issues in jessie.

4 issues skipped by the security teams:

CVE-2016-3881: The decoder_peek_si_internal function in vp9/vp9_dx_iface.c in libvpx in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows remote attackers to cause a denial of service (buffer over-read, and device hang or reboot) via a crafted media file, aka internal bug 30013856.
CVE-2016-6711: A remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Android ID: A-30593765.
CVE-2016-6712: A remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Android ID: A-30593752.
CVE-2017-0393: A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-30436808.

Please fix them.

Created: 2015-09-23 Last update: 2019-11-28 22:40

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2019-9371: In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-132783254

Please fix it.

Created: 2019-11-08 Last update: 2019-11-28 22:40

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2014-07-02 Last update: 2018-02-17 19:55

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.4.1 instead of 4.4.0).

Created: 2019-09-29 Last update: 2019-09-29 23:40

news

[rss feed]

[2019-12-03] Accepted libvpx 1.6.1-3+deb9u2 (source amd64 all) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Moritz Mühlenhoff)
[2019-12-03] Accepted libvpx 1.7.0-3+deb10u1 (source amd64 all) into proposed-updates->stable-new, proposed-updates (Moritz Mühlenhoff)
[2019-11-28] Accepted libvpx 1.7.0-3+deb10u1 (source amd64 all) into stable->embargoed, stable (Moritz Mühlenhoff)
[2019-11-28] Accepted libvpx 1.6.1-3+deb9u2 (source amd64 all) into oldstable->embargoed, oldstable (Moritz Mühlenhoff)
[2019-11-26] Accepted libvpx 1.3.0-3+deb8u2 (source all amd64) into oldoldstable (Dylan Aïssi)
[2019-08-07] libvpx 1.8.1-2 MIGRATED to testing (Debian testing watch)
[2019-08-05] Accepted libvpx 1.8.1-2 (source) into unstable (Ondřej Nový)
[2019-08-01] Accepted libvpx 1.8.1-1 (source amd64 all) into experimental, experimental (Ondřej Nový)
[2018-03-10] Accepted libvpx 1.3.0-3+deb8u1 (source all amd64) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Ondřej Nový)
[2018-03-04] Accepted libvpx 1.6.1-3+deb9u1 (source amd64 all) into proposed-updates->stable-new, proposed-updates (Ondřej Nový)
[2018-03-04] Accepted libvpx 1.6.1-3+deb9u1 (source amd64 all) into stable->embargoed, stable (Ondřej Nový)
[2018-03-04] Accepted libvpx 1.3.0-3+deb8u1 (source all amd64) into oldstable->embargoed, oldstable (Ondřej Nový)
[2018-02-24] Accepted libvpx 1.1.0-1+deb7u1 (source all amd64) into oldoldstable (Thorsten Alteholz)
[2018-02-24] Accepted libvpx 1.1.0-1+deb7u1 (source all amd64) into oldoldstable (Thorsten Alteholz)
[2018-02-22] libvpx 1.7.0-3 MIGRATED to testing (Debian testing watch)
[2018-02-22] libvpx 1.7.0-3 MIGRATED to testing (Debian testing watch)
[2018-02-17] Accepted libvpx 1.7.0-3 (source) into unstable (Ondřej Nový)
[2018-02-09] Accepted libvpx 1.7.0-2 (source amd64 all) into experimental, experimental (Ondřej Nový)
[2017-04-09] libvpx 1.6.1-3 MIGRATED to testing (Debian testing watch)
[2017-04-03] Accepted libvpx 1.6.1-3 (source) into unstable (Mattia Rizzolo)
[2017-02-21] Accepted libvpx 1.6.1-2~bpo8+1 (source amd64 all) into jessie-backports (Ondřej Nový)
[2017-01-28] libvpx 1.6.1-2 MIGRATED to testing (Debian testing watch)
[2017-01-17] Accepted libvpx 1.6.1-2 (source) into unstable (Ondřej Nový)
[2017-01-17] Accepted libvpx 1.6.1-1 (source) into unstable (Ondřej Nový)
[2016-11-16] libvpx 1.6.0-3 MIGRATED to testing (Debian testing watch)
[2016-11-10] Accepted libvpx 1.6.0-3 (source) into unstable (Ondřej Nový)
[2016-09-15] Accepted libvpx 1.6.0-2~bpo8+1 (source amd64 all) into jessie-backports, jessie-backports (Ondřej Nový)
[2016-09-07] libvpx 1.6.0-2 MIGRATED to testing (Debian testing watch)
[2016-09-01] Accepted libvpx 1.6.0-2 (source) into unstable (Ondřej Nový)
[2016-08-19] Accepted libvpx 1.6.0-1 (source amd64 all) into experimental, experimental (Ondřej Nový)

bugs [bug history graph]

all: 8
RC: 0
I&N: 7
M&W: 1
F&P: 0
patch: 1

links

homepage
lintian
buildd: logs, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.8.1-2
4 bugs