Debian Package Tracker

general

source: libzip (source, libs)
version: 1.1.2-1.1
maintainer: Fathi Boudra [DMD]
arch: any
std-ver: 3.9.7
VCS: Git (Browse)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.10.1-1.1
oldstable: 0.11.2-1.2
stable: 1.1.2-1.1
testing: 1.1.2-1.1
unstable: 1.1.2-1.1
NEW/experimental: 1.3.0-1

versioned links

0.10.1-1.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.11.2-1.2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.1.2-1.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libzip-dev
libzip4
zipcmp
zipmerge
ziptool

action needed

A new upstream version is available: 1.3.0

high

A new upstream version 1.3.0 is available, you should consider packaging it.

Created: 2017-08-12 Last update: 2017-10-24 01:23

1 security issue in sid

high

There is 1 open security issue in sid.

1 important issue:

CVE-2017-14107: The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive.

Please fix it.

Created: 2017-09-02 Last update: 2017-09-07 07:28

1 security issue in buster

high

There is 1 open security issue in buster.

1 important issue:

CVE-2017-14107: The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive.

Please fix it.

Created: 2017-09-02 Last update: 2017-09-07 07:28

lintian reports 4 warnings

high

Lintian reports 4 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2015-03-23 Last update: 2016-12-29 01:04

1 bug tagged patch in the BTS

normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2017-09-02 Last update: 2017-10-24 01:09

O: This package has been orphaned and needs a maintainer.

normal

This package has been orphaned. This means that it does not have a real maintainer at the moment. Please consider adopting this package if you are interested in it. Please see bug number #879387 for more information.

Created: 2017-10-21 Last update: 2017-10-21 19:25

1 ignored security issue in wheezy

low

There is 1 open security issue in wheezy.

1 issue skipped by the security teams:

CVE-2017-14107: The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive.

Please fix it.

Created: 2017-09-02 Last update: 2017-09-07 07:28

1 ignored security issue in jessie

low

There is 1 open security issue in jessie.

1 issue skipped by the security teams:

CVE-2017-14107: The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive.

Please fix it.

Created: 2017-09-02 Last update: 2017-09-07 07:28

1 ignored security issue in stretch

low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2017-14107: The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive.

Please fix it.

Created: 2017-09-02 Last update: 2017-09-07 07:28

Standards version of the package is outdated.

wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 3.9.8 instead of 3.9.7).

Created: 2016-05-16 Last update: 2016-05-16 18:45

news

[rss feed]

[2016-05-22] libzip 1.1.2-1.1 MIGRATED to testing (Debian testing watch)
[2016-05-16] Accepted libzip 1.1.2-1.1 (source amd64) into unstable, unstable (Ondřej Surý)
[2016-02-21] libzip 1.0.1-1.1 MIGRATED to testing (Debian testing watch)
[2016-02-10] Accepted libzip 1.0.1-1.1 (source amd64) into unstable, unstable (Hans-Christoph Steiner)
[2015-03-25] libzip 0.11.2-1.2 MIGRATED to testing (Britney)
[2015-03-22] Accepted libzip 0.11.2-1.2 (source amd64) into unstable (Salvatore Bonaccorso)
[2014-08-12] libzip 0.11.2-1.1 MIGRATED to testing (Britney)
[2014-08-06] Accepted libzip 0.11.2-1.1 (source amd64) into unstable (John Paul Adrian Glaubitz)
[2014-02-15] libzip 0.11.2-1 MIGRATED to testing (Debian testing watch)
[2014-02-09] Accepted libzip 0.11.2-1 (source amd64) (Fathi Boudra)
[2013-11-11] libzip 0.10.1-1.2 MIGRATED to testing (Debian testing watch)
[2013-11-05] Accepted libzip 0.10.1-1.2 (source amd64) (gregor herrmann)
[2012-07-18] libzip 0.10.1-1.1 MIGRATED to testing (Debian testing watch)
[2012-07-07] Accepted libzip 0.10.1-1.1 (source i386) (Luk Claes) (signed by: Daniel Baumann)
[2012-06-01] libzip 0.10.1-1 MIGRATED to testing (Debian testing watch)
[2012-05-21] Accepted libzip 0.10.1-1 (source amd64) (Fathi Boudra)
[2012-02-10] libzip 0.10-1 MIGRATED to testing (Debian testing watch)
[2012-01-01] Accepted libzip 0.10-1 (source amd64) (Fathi Boudra)
[2010-04-05] libzip 0.9.3-1 MIGRATED to testing (Debian testing watch)
[2010-03-24] Accepted libzip 0.9.3-1 (source amd64) (Fathi Boudra)
[2009-08-11] libzip 0.9-3 MIGRATED to testing (Debian testing watch)
[2009-07-28] Accepted libzip 0.9-3 (source amd64) (Fathi Boudra)
[2009-07-25] Accepted libzip 0.9-2 (source i386 amd64) (Fathi Boudra)
[2009-07-20] Accepted libzip 0.9-1 (source i386 amd64) (Fathi Boudra)
[2007-10-30] libzip 0.8-1 MIGRATED to testing (Debian testing watch)
[2007-10-19] Accepted libzip 0.8-1 (source amd64) (Fathi Boudra) (signed by: Pierre Habouzit)

bugs [bug history graph]

all: 1
RC: 0
I&N: 1
M&W: 0
F&P: 0

links

homepage
lintian (0, 4)
buildd: logs, clang, reproducibility
popcon
browse source code
edit tags
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.1.2-1.1
2 bugs