Debian Package Tracker

general

source: libvpx (main)
version: 1.9.0-1
maintainer: Debian Multimedia Maintainers (archive) (DMD)
uploaders: Ondřej Nový [DMD] – Sebastian Dröge [DMD]
arch: all any
std-ver: 4.5.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1.3.0-3+deb8u1
o-o-sec: 1.3.0-3+deb8u3
oldstable: 1.6.1-3+deb9u2
old-sec: 1.6.1-3+deb9u2
stable: 1.7.0-3+deb10u1
stable-sec: 1.7.0-3+deb10u1
testing: 1.9.0-1
unstable: 1.9.0-1

versioned links

1.3.0-3+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.3.0-3+deb8u3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.6.1-3+deb9u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.7.0-3+deb10u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.9.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libvpx-dev (1 bugs: 0, 1, 0, 0)
libvpx-doc
libvpx6 (1 bugs: 0, 1, 0, 0)
vpx-tools

action needed

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2020-10-19 Last update: 2021-01-24 13:31

Depends on packages which need a new maintainer normal

The packages that libvpx depends on which need a new maintainer are:

dh-exec (#851746)
- Build-Depends: dh-exec

Created: 2019-11-22 Last update: 2021-01-24 12:32

2 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit a4c549c71b907e7bbf6b5a57ccef52be795367ef
Merge: 33f3d4b 84e0dcc
Author: Sebastian Ramacher <sramacher@debian.org>
Date:   Thu Dec 17 22:59:40 2020 +0000

    Merge branch 'lintian-fixes' into 'master'
    
    Set upstream metadata fields: Repository, Repository-Browse
    
    See merge request multimedia-team/libvpx!2

commit 84e0dccca0ceb74169b6a523a4e03f911d4281b7
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Mon Dec 14 04:06:49 2020 +0000

    Set upstream metadata fields: Repository, Repository-Browse.
    
    Changes-By: lintian-brush
    Fixes: lintian: upstream-metadata-file-is-missing
    See-also: https://lintian.debian.org/tags/upstream-metadata-file-is-missing.html
    Fixes: lintian: upstream-metadata-missing-repository
    See-also: https://lintian.debian.org/tags/upstream-metadata-missing-repository.html

Created: 2020-12-17 Last update: 2021-01-17 13:07

2 ignored security issues in stretch low

There are 2 open security issues in stretch.

2 issues skipped by the security teams:

CVE-2019-9371: In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-132783254
CVE-2020-0034: In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770

Please fix them.

Created: 2019-11-08 Last update: 2020-12-12 03:53

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2014-07-02 Last update: 2018-02-17 19:55

news

[rss feed]

[2020-12-12] libvpx 1.9.0-1 MIGRATED to testing (Debian testing watch)
[2020-12-09] Accepted libvpx 1.9.0-1 (source) into unstable (Sebastian Ramacher)
[2020-03-09] Accepted libvpx 1.3.0-3+deb8u3 (source all amd64) into oldoldstable (Chris Lamb)
[2020-01-09] libvpx 1.8.2-1 MIGRATED to testing (Debian testing watch)
[2019-12-27] Accepted libvpx 1.8.2-1 (source) into unstable (Ondřej Nový)
[2019-12-03] Accepted libvpx 1.6.1-3+deb9u2 (source amd64 all) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Moritz Mühlenhoff)
[2019-12-03] Accepted libvpx 1.7.0-3+deb10u1 (source amd64 all) into proposed-updates->stable-new, proposed-updates (Moritz Mühlenhoff)
[2019-11-28] Accepted libvpx 1.7.0-3+deb10u1 (source amd64 all) into stable->embargoed, stable (Moritz Mühlenhoff)
[2019-11-28] Accepted libvpx 1.6.1-3+deb9u2 (source amd64 all) into oldstable->embargoed, oldstable (Moritz Mühlenhoff)
[2019-11-26] Accepted libvpx 1.3.0-3+deb8u2 (source all amd64) into oldoldstable (Dylan Aïssi)
[2019-08-07] libvpx 1.8.1-2 MIGRATED to testing (Debian testing watch)
[2019-08-05] Accepted libvpx 1.8.1-2 (source) into unstable (Ondřej Nový)
[2019-08-01] Accepted libvpx 1.8.1-1 (source amd64 all) into experimental, experimental (Ondřej Nový)
[2018-03-10] Accepted libvpx 1.3.0-3+deb8u1 (source all amd64) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Ondřej Nový)
[2018-03-04] Accepted libvpx 1.6.1-3+deb9u1 (source amd64 all) into proposed-updates->stable-new, proposed-updates (Ondřej Nový)
[2018-03-04] Accepted libvpx 1.6.1-3+deb9u1 (source amd64 all) into stable->embargoed, stable (Ondřej Nový)
[2018-03-04] Accepted libvpx 1.3.0-3+deb8u1 (source all amd64) into oldstable->embargoed, oldstable (Ondřej Nový)
[2018-02-24] Accepted libvpx 1.1.0-1+deb7u1 (source all amd64) into oldoldstable (Thorsten Alteholz)
[2018-02-22] libvpx 1.7.0-3 MIGRATED to testing (Debian testing watch)
[2018-02-17] Accepted libvpx 1.7.0-3 (source) into unstable (Ondřej Nový)
[2018-02-09] Accepted libvpx 1.7.0-2 (source amd64 all) into experimental, experimental (Ondřej Nový)
[2017-04-09] libvpx 1.6.1-3 MIGRATED to testing (Debian testing watch)
[2017-04-03] Accepted libvpx 1.6.1-3 (source) into unstable (Mattia Rizzolo)
[2017-02-21] Accepted libvpx 1.6.1-2~bpo8+1 (source amd64 all) into jessie-backports (Ondřej Nový)
[2017-01-28] libvpx 1.6.1-2 MIGRATED to testing (Debian testing watch)
[2017-01-17] Accepted libvpx 1.6.1-2 (source) into unstable (Ondřej Nový)
[2017-01-17] Accepted libvpx 1.6.1-1 (source) into unstable (Ondřej Nový)
[2016-11-16] libvpx 1.6.0-3 MIGRATED to testing (Debian testing watch)
[2016-11-10] Accepted libvpx 1.6.0-3 (source) into unstable (Ondřej Nový)
[2016-09-15] Accepted libvpx 1.6.0-2~bpo8+1 (source amd64 all) into jessie-backports, jessie-backports (Ondřej Nový)

bugs [bug history graph]

all: 10
RC: 0
I&N: 9
M&W: 1
F&P: 0
patch: 1

links

homepage
lintian
buildd: logs, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.9.0-1
4 bugs