Debian Package Tracker

general

source: libzip (main)
version: 1.1.2-1.1
maintainer: Fathi Boudra [DMD]
arch: any
std-ver: 3.9.7
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.10.1-1.1
oldstable: 0.11.2-1.2
stable: 1.1.2-1.1
testing: 1.1.2-1.1
unstable: 1.1.2-1.1
exp: 1.5.1-1

versioned links

0.10.1-1.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.11.2-1.2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.1.2-1.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.5.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libzip-dev
libzip4
zipcmp
zipmerge
ziptool

action needed

Problems while searching for a new upstream version high

uscan had problems while searching for a new upstream version:

In debian/watch no matching files for watch line
  http://www.nih.at/libzip/libzip-(.*)\.tar\.gz

Created: 2017-11-21 Last update: 2019-01-21 12:45

lintian reports 8 errors and 1 warning high

Lintian reports 8 errors and 1 warning about this package. You should make the package lintian clean getting rid of them.

Created: 2015-03-23 Last update: 2019-01-20 07:18

Standards version of the package is outdated. high

The package is severely out of date with respect to the Debian Policy. The package should be updated to follow the last version of Debian Policy (Standards-Version 4.3.0 instead of 3.9.7).

Created: 2016-05-16 Last update: 2018-12-23 17:15

1 security issue in buster high

There is 1 open security issue in buster.

1 important issue:

CVE-2017-14107: The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive.

Please fix it.

Created: 2017-09-02 Last update: 2018-06-02 08:03

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2017-14107: The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive.

Please fix it.

Created: 2017-09-02 Last update: 2018-06-02 08:03

2 new commits since last upload, time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit dd3cea8eadc8324ead1cd28e1f118dde2da55723
Author: Ondřej Surý <ondrej@debian.org>
Date:   Mon Jan 21 11:16:29 2019 +0000

    Revert the soname change back to libzip4

commit cbe29d173d4bdbe9cffb51e007c289f103f4342a
Author: Ondřej Surý <ondrej@debian.org>
Date:   Mon Jan 21 11:13:54 2019 +0000

    Reintroduce dummy zip_archive_set_tempdir function to lower the SONAME back to libzip.so.4

Created: 2019-01-21 Last update: 2019-01-21 13:35

The URL(s) for this package had some recent persistent issues low

DUCK reports some issues concerning upstream URLs defined for this package.

Created: 2019-01-12 Last update: 2019-01-21 13:37

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2017-14107: The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive.

Please fix it.

Created: 2017-09-02 Last update: 2018-06-02 08:03

1 ignored security issue in jessie low

There is 1 open security issue in jessie.

1 issue skipped by the security teams:

CVE-2017-14107: The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive.

Please fix it.

Created: 2017-09-02 Last update: 2018-06-02 08:03

testing migrations

This package will soon be part of the auto-libzip transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.

news

[rss feed]

[2019-01-19] Accepted libzip 1.5.1-1 (source) into experimental (Ondřej Surý)
[2017-11-22] Accepted libzip 1.3.2-1 (source amd64) into experimental (Stefan Schörghofer) (signed by: Bernd Zeimetz)
[2017-11-14] Accepted libzip 1.3.0+dfsg.1-1 (source amd64) into experimental, experimental (Stefan Schörghofer) (signed by: Bernd Zeimetz)
[2016-05-22] libzip 1.1.2-1.1 MIGRATED to testing (Debian testing watch)
[2016-05-16] Accepted libzip 1.1.2-1.1 (source amd64) into unstable, unstable (Ondřej Surý)
[2016-02-21] libzip 1.0.1-1.1 MIGRATED to testing (Debian testing watch)
[2016-02-10] Accepted libzip 1.0.1-1.1 (source amd64) into unstable, unstable (Hans-Christoph Steiner)
[2015-03-25] libzip 0.11.2-1.2 MIGRATED to testing (Britney)
[2015-03-22] Accepted libzip 0.11.2-1.2 (source amd64) into unstable (Salvatore Bonaccorso)
[2014-08-12] libzip 0.11.2-1.1 MIGRATED to testing (Britney)
[2014-08-06] Accepted libzip 0.11.2-1.1 (source amd64) into unstable (John Paul Adrian Glaubitz)
[2014-02-15] libzip 0.11.2-1 MIGRATED to testing (Debian testing watch)
[2014-02-09] Accepted libzip 0.11.2-1 (source amd64) (Fathi Boudra)
[2013-11-11] libzip 0.10.1-1.2 MIGRATED to testing (Debian testing watch)
[2013-11-05] Accepted libzip 0.10.1-1.2 (source amd64) (gregor herrmann)
[2012-07-18] libzip 0.10.1-1.1 MIGRATED to testing (Debian testing watch)
[2012-07-07] Accepted libzip 0.10.1-1.1 (source i386) (Luk Claes) (signed by: Daniel Baumann)
[2012-06-01] libzip 0.10.1-1 MIGRATED to testing (Debian testing watch)
[2012-05-21] Accepted libzip 0.10.1-1 (source amd64) (Fathi Boudra)
[2012-02-10] libzip 0.10-1 MIGRATED to testing (Debian testing watch)
[2012-01-01] Accepted libzip 0.10-1 (source amd64) (Fathi Boudra)
[2010-04-05] libzip 0.9.3-1 MIGRATED to testing (Debian testing watch)
[2010-03-24] Accepted libzip 0.9.3-1 (source amd64) (Fathi Boudra)
[2009-08-11] libzip 0.9-3 MIGRATED to testing (Debian testing watch)
[2009-07-28] Accepted libzip 0.9-3 (source amd64) (Fathi Boudra)
[2009-07-25] Accepted libzip 0.9-2 (source i386 amd64) (Fathi Boudra)
[2009-07-20] Accepted libzip 0.9-1 (source i386 amd64) (Fathi Boudra)
[2007-10-30] libzip 0.8-1 MIGRATED to testing (Debian testing watch)
[2007-10-19] Accepted libzip 0.8-1 (source amd64) (Fathi Boudra) (signed by: Pierre Habouzit)

bugs [bug history graph]

all: 1
RC: 0
I&N: 1
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (8, 1)
buildd: logs, exp, clang, reproducibility
popcon
browse source code
edit tags
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.5.1-0ubuntu1
2 bugs
patches for 1.5.1-0ubuntu1