Debian Package Tracker

general

source: netpbm-free (main)
version: 2:10.0-15.3
maintainer: Andreas Barth (DMD) (LowNMU)
uploaders: Steve McIntyre [DMD]
arch: any
std-ver: 3.8.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 2:10.0-15.2
oldstable: 2:10.0-15.3
stable: 2:10.0-15.3
testing: 2:10.0-15.3
unstable: 2:10.0-15.3
exp: 2:10.78.05-0.1

versioned links

2:10.0-15.2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2:10.0-15.3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2:10.78.05-0.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libnetpbm10 (1 bugs: 0, 1, 0, 0)
libnetpbm10-dev (4 bugs: 0, 2, 2, 0)
libnetpbm9 (1 bugs: 0, 0, 1, 0)
libnetpbm9-dev
netpbm (57 bugs: 0, 32, 25, 0)

action needed

Failed to analyze the VCS repository. Please troubleshoot and fix the issue. high

vcswatch reports that there is an error with this package's VCS, or the debian/changelog file inside it. Please check the error shown below and try to fix it. You might have to update the VCS URL in the debian/control file to point to the correct repository.

fatal: repository 'https://anonscm.debian.org/git/collab-maint/netpbm.git/' not found

Created: 2017-12-03 Last update: 2020-01-23 06:39

Standards version of the package is outdated. high

The package is severely out of date with respect to the Debian Policy. The package should be updated to follow the last version of Debian Policy (Standards-Version 4.5.0 instead of 3.8.4).

Created: 2014-10-06 Last update: 2020-01-21 05:06

lintian reports 6 errors and 433 warnings high

Lintian reports 6 errors and 433 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2019-08-26 Last update: 2019-10-21 02:11

3 security issues in buster high

There are 3 open security issues in buster.

3 important issues:

CVE-2017-2579: An out-of-bounds read vulnerability was found in netpbm before 10.61. The expandCodeOntoStack() function has an insufficient code value check, so that a maliciously crafted file could cause the application to crash or possibly allows code execution.
CVE-2017-2580: An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution.
CVE-2017-2581: An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution.

Please fix them.

Created: 2017-06-18 Last update: 2019-10-21 00:30

3 security issues in bullseye high

There are 3 open security issues in bullseye.

3 important issues:

CVE-2017-2579: An out-of-bounds read vulnerability was found in netpbm before 10.61. The expandCodeOntoStack() function has an insufficient code value check, so that a maliciously crafted file could cause the application to crash or possibly allows code execution.
CVE-2017-2580: An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution.
CVE-2017-2581: An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution.

Please fix them.

Created: 2019-07-07 Last update: 2019-10-21 00:30

3 security issues in sid high

There are 3 open security issues in sid.

3 important issues:

CVE-2017-2579: An out-of-bounds read vulnerability was found in netpbm before 10.61. The expandCodeOntoStack() function has an insufficient code value check, so that a maliciously crafted file could cause the application to crash or possibly allows code execution.
CVE-2017-2580: An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution.
CVE-2017-2581: An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution.

Please fix them.

Created: 2017-02-06 Last update: 2019-10-21 00:30

1 security issue in jessie high

There is 1 open security issue in jessie.

1 important issue:

CVE-2017-2581: An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution.

Please fix it.

Created: 2017-02-06 Last update: 2019-10-21 00:30

3 security issues in stretch high

There are 3 open security issues in stretch.

3 important issues:

CVE-2017-2579: An out-of-bounds read vulnerability was found in netpbm before 10.61. The expandCodeOntoStack() function has an insufficient code value check, so that a maliciously crafted file could cause the application to crash or possibly allows code execution.
CVE-2017-2580: An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution.
CVE-2017-2581: An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution.

Please fix them.

Created: 2017-02-06 Last update: 2019-10-21 00:30

Build log checks report 1 error and 2 warnings high

Build log checks report 1 error and 2 warnings

Created: 2016-04-07 Last update: 2016-04-07 19:01

4 bugs tagged patch in the BTS normal

The BTS contains patches fixing 4 bugs, consider including or untagging them.

Created: 2019-04-01 Last update: 2020-01-24 00:31

The URL(s) for this package had some recent persistent issues low

DUCK reports some issues concerning upstream URLs defined for this package.

Created: 2019-01-12 Last update: 2020-01-19 09:04

testing migrations

This package will soon be part of the auto-netpbm-free transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.

news

[rss feed]

[2017-07-13] Accepted netpbm-free 2:10.78.05-0.1 (source amd64) into experimental, experimental (Laurent Bigonville)
[2016-02-05] netpbm-free 2:10.0-15.3 MIGRATED to testing (Debian testing watch)
[2016-01-30] Accepted netpbm-free 2:10.0-15.3 (source amd64) into unstable (Tobias Frost)
[2014-11-12] netpbm-free 2:10.0-15.2 MIGRATED to testing (Britney)
[2014-11-07] Accepted netpbm-free 2:10.0-15.2 (source) into unstable (Michael Gilbert)
[2014-10-19] netpbm-free 2:10.0-15.1 MIGRATED to testing (Britney)
[2014-10-05] Accepted netpbm-free 2:10.0-15.1 (source i386) into unstable (Andrew Shadura)
[2011-08-10] netpbm-free 2:10.0-15 MIGRATED to testing (Debian testing watch)
[2011-07-30] Accepted netpbm-free 2:10.0-15 (source mipsel) (Andreas Barth)
[2011-07-29] Accepted netpbm-free 2:10.0-14 (source mipsel) (Andreas Barth)
[2011-07-29] Accepted netpbm-free 2:10.0-13 (source mipsel) (Andreas Barth)
[2010-06-24] netpbm-free 2:10.0-12.2 MIGRATED to testing (Debian testing watch)
[2010-06-20] Accepted netpbm-free 2:10.0-12.2 (source amd64) (Nico Golde)
[2010-04-18] netpbm-free 2:10.0-12.1+squeeze1 MIGRATED to testing (Debian testing watch)
[2010-04-17] Accepted netpbm-free 2:10.0-12+lenny1 (source i386) (Giuseppe Iuculano)
[2010-04-03] Accepted netpbm-free 2:10.0-12.1+squeeze1 (source i386) (Giuseppe Iuculano)
[2010-03-07] netpbm-free 2:10.0-12.1 MIGRATED to testing (Debian testing watch)
[2010-02-24] Accepted netpbm-free 2:10.0-12.1 (source i386) (Jari Aalto)
[2008-07-26] Accepted netpbm-free 2:10.0-11.1+etch1 (source amd64) (Devin Carraway)
[2008-06-03] netpbm-free 2:10.0-12 MIGRATED to testing (Debian testing watch)
[2008-06-01] Accepted netpbm-free 2:10.0-12 (ia64 source) (Andreas Barth)
[2008-05-27] Accepted netpbm-free 2:10.0-11.1+etch1 (source amd64) (Devin Carraway)
[2008-02-11] netpbm-free 2:10.0-11.1 MIGRATED to testing (Debian testing watch)
[2008-02-07] Accepted netpbm-free 2:10.0-11.1 (source i386) (Nico Golde)
[2007-01-28] netpbm-free 2:10.0-11 MIGRATED to testing (Debian testing watch)
[2007-01-20] Accepted netpbm-free 2:10.0-11 (source amd64) (Andreas Barth)
[2006-04-18] Accepted netpbm-free 2:10.0-8sarge3 (source i386) (Moritz Muehlenhoff)
[2006-03-29] Accepted netpbm-free 2:10.0-8sarge3 (source i386) (Moritz Muehlenhoff)
[2006-02-10] netpbm-free 2:10.0-10.1 MIGRATED to testing (Debian testing watch)
[2006-02-07] Accepted netpbm-free 2:10.0-10.1 (source i386) (Florian Weimer)

bugs [bug history graph]

all: 70
RC: 0
I&N: 38
M&W: 30
F&P: 2
patch: 4

links

homepage
lintian (6, 433)
buildd: logs, exp, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2:10.0-15.3build1
17 bugs (1 patch)