netpbm-free - Debian Package Tracker

general

source: netpbm-free (main)
version: 2:11.13.03+ds-2
maintainer: Debian PhotoTools Maintainers (archive) (DMD)
uploaders: Steve McIntyre (DMD) – Andreas Metzler (DMD)
arch: any
std-ver: 4.7.3
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 2:10.0-15.4
oldstable: 2:11.01.00-2
stable: 2:11.10.02-1
testing: 2:11.13.03+ds-2
unstable: 2:11.13.03+ds-2
exp: 2:11.15.04+ds-1

versioned links

2:10.0-15.4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2:11.01.00-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2:11.10.02-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2:11.13.03+ds-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2:11.15.04+ds-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libnetpbm-dev
libnetpbm11t64
netpbm (18 bugs: 0, 12, 6, 0)

action needed

The VCS repository is not up to date, push the missing commits. high

vcswatch reports that the current version of the package is not in its VCS.
Either you need to push your commits and/or your tags, or the information about the package's VCS are out of date. A common cause of the latter issue when using the Git VCS is not specifying the correct branch when the packaging is not in the default one (remote HEAD branch), which is usually "master" but can be modified in salsa.debian.org in the project's general settings with the "Default Branch" field). Alternatively the Vcs-Git field in debian/control can contain a "-b <branch-name>" suffix to indicate what branch is used for the Debian packaging.

Created: 2026-04-24 Last update: 2026-11-08 19:03

7 security issues in trixie high

There are 7 open security issues in trixie.

7 important issues:

CVE-2026-112275: Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder pr_load_image in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile with tiny dimensions and a long run-length body to write controlled bytes past md_image, causing memory corruption and crashes.
CVE-2026-112276: Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerability in rasttopnm that allows attackers to read heap memory by supplying Sun rasterfiles with short colormaps. Attackers can craft colormapped rasterfiles with pixel bytes exceeding the palette length to leak up to 255 adjacent heap bytes into the PNM output or crash the program.
CVE-2026-120431: Netpbm before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.07 contains a heap-based buffer overflow in sgitopnm's readChannels() function when processing RLE-compressed SGI images. Attackers can supply crafted SGI files with oversized offset table lengths to write controlled data past the heap buffer, causing crashes or potential code execution.
CVE-2026-120432: Netpbm before 10.86.51, 11.02.30, and 11.15.08 contains an integer overflow vulnerability in winicontopam that allows attackers to corrupt heap memory via oversized ICO/CUR dimensions. Attackers can supply a crafted icon file with width or height above 32767, wrapping int16_t loop counters into negative row buffer indices to cause crashes or potential code execution.
CVE-2026-120435: Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a heap buffer overflow in xpmtoppm caused by an unvalidated characters-per-pixel value in the XPM header. Attackers can supply a crafted XPM file with characters-per-pixel greater than 3 to overrun fixed 3-byte colorName hash entries, causing crashes or potentially code execution.
CVE-2026-120436: Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an integer overflow in jbigtopnm that causes heap buffer overflow when computing output buffer size. Attackers can supply a crafted multi-plane JBIG file with large header dimensions so jbg_dec_merge_planes() overflows the undersized buffer, causing crashes or potentially code execution.
CVE-2026-120437: Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an out-of-bounds read vulnerability in the tgatoppm converter's get_pixel() function that uses unchecked pixel values as color map indexes. Attackers can supply a crafted color-mapped Targa file whose pixel values exceed the declared color map bounds to crash the converter or leak adjacent memory into the output image.

Created: 2026-10-20 Last update: 2026-11-06 02:00

7 security issues in sid high

There are 7 open security issues in sid.

7 important issues:

CVE-2026-112275: Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder pr_load_image in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile with tiny dimensions and a long run-length body to write controlled bytes past md_image, causing memory corruption and crashes.
CVE-2026-112276: Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerability in rasttopnm that allows attackers to read heap memory by supplying Sun rasterfiles with short colormaps. Attackers can craft colormapped rasterfiles with pixel bytes exceeding the palette length to leak up to 255 adjacent heap bytes into the PNM output or crash the program.
CVE-2026-120431: Netpbm before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.07 contains a heap-based buffer overflow in sgitopnm's readChannels() function when processing RLE-compressed SGI images. Attackers can supply crafted SGI files with oversized offset table lengths to write controlled data past the heap buffer, causing crashes or potential code execution.
CVE-2026-120432: Netpbm before 10.86.51, 11.02.30, and 11.15.08 contains an integer overflow vulnerability in winicontopam that allows attackers to corrupt heap memory via oversized ICO/CUR dimensions. Attackers can supply a crafted icon file with width or height above 32767, wrapping int16_t loop counters into negative row buffer indices to cause crashes or potential code execution.
CVE-2026-120435: Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a heap buffer overflow in xpmtoppm caused by an unvalidated characters-per-pixel value in the XPM header. Attackers can supply a crafted XPM file with characters-per-pixel greater than 3 to overrun fixed 3-byte colorName hash entries, causing crashes or potentially code execution.
CVE-2026-120436: Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an integer overflow in jbigtopnm that causes heap buffer overflow when computing output buffer size. Attackers can supply a crafted multi-plane JBIG file with large header dimensions so jbg_dec_merge_planes() overflows the undersized buffer, causing crashes or potentially code execution.
CVE-2026-120437: Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an out-of-bounds read vulnerability in the tgatoppm converter's get_pixel() function that uses unchecked pixel values as color map indexes. Attackers can supply a crafted color-mapped Targa file whose pixel values exceed the declared color map bounds to crash the converter or leak adjacent memory into the output image.

Created: 2026-10-20 Last update: 2026-11-06 02:00

7 security issues in forky high

There are 7 open security issues in forky.

7 important issues:

CVE-2026-112275: Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder pr_load_image in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile with tiny dimensions and a long run-length body to write controlled bytes past md_image, causing memory corruption and crashes.
CVE-2026-112276: Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerability in rasttopnm that allows attackers to read heap memory by supplying Sun rasterfiles with short colormaps. Attackers can craft colormapped rasterfiles with pixel bytes exceeding the palette length to leak up to 255 adjacent heap bytes into the PNM output or crash the program.
CVE-2026-120431: Netpbm before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.07 contains a heap-based buffer overflow in sgitopnm's readChannels() function when processing RLE-compressed SGI images. Attackers can supply crafted SGI files with oversized offset table lengths to write controlled data past the heap buffer, causing crashes or potential code execution.
CVE-2026-120432: Netpbm before 10.86.51, 11.02.30, and 11.15.08 contains an integer overflow vulnerability in winicontopam that allows attackers to corrupt heap memory via oversized ICO/CUR dimensions. Attackers can supply a crafted icon file with width or height above 32767, wrapping int16_t loop counters into negative row buffer indices to cause crashes or potential code execution.
CVE-2026-120435: Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a heap buffer overflow in xpmtoppm caused by an unvalidated characters-per-pixel value in the XPM header. Attackers can supply a crafted XPM file with characters-per-pixel greater than 3 to overrun fixed 3-byte colorName hash entries, causing crashes or potentially code execution.
CVE-2026-120436: Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an integer overflow in jbigtopnm that causes heap buffer overflow when computing output buffer size. Attackers can supply a crafted multi-plane JBIG file with large header dimensions so jbg_dec_merge_planes() overflows the undersized buffer, causing crashes or potentially code execution.
CVE-2026-120437: Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an out-of-bounds read vulnerability in the tgatoppm converter's get_pixel() function that uses unchecked pixel values as color map indexes. Attackers can supply a crafted color-mapped Targa file whose pixel values exceed the declared color map bounds to crash the converter or leak adjacent memory into the output image.

Created: 2026-10-20 Last update: 2026-11-06 02:00

7 security issues in bookworm high

There are 7 open security issues in bookworm.

7 important issues:

CVE-2026-112275: Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder pr_load_image in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile with tiny dimensions and a long run-length body to write controlled bytes past md_image, causing memory corruption and crashes.
CVE-2026-112276: Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerability in rasttopnm that allows attackers to read heap memory by supplying Sun rasterfiles with short colormaps. Attackers can craft colormapped rasterfiles with pixel bytes exceeding the palette length to leak up to 255 adjacent heap bytes into the PNM output or crash the program.
CVE-2026-120431: Netpbm before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.07 contains a heap-based buffer overflow in sgitopnm's readChannels() function when processing RLE-compressed SGI images. Attackers can supply crafted SGI files with oversized offset table lengths to write controlled data past the heap buffer, causing crashes or potential code execution.
CVE-2026-120432: Netpbm before 10.86.51, 11.02.30, and 11.15.08 contains an integer overflow vulnerability in winicontopam that allows attackers to corrupt heap memory via oversized ICO/CUR dimensions. Attackers can supply a crafted icon file with width or height above 32767, wrapping int16_t loop counters into negative row buffer indices to cause crashes or potential code execution.
CVE-2026-120435: Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a heap buffer overflow in xpmtoppm caused by an unvalidated characters-per-pixel value in the XPM header. Attackers can supply a crafted XPM file with characters-per-pixel greater than 3 to overrun fixed 3-byte colorName hash entries, causing crashes or potentially code execution.
CVE-2026-120436: Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an integer overflow in jbigtopnm that causes heap buffer overflow when computing output buffer size. Attackers can supply a crafted multi-plane JBIG file with large header dimensions so jbg_dec_merge_planes() overflows the undersized buffer, causing crashes or potentially code execution.
CVE-2026-120437: Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an out-of-bounds read vulnerability in the tgatoppm converter's get_pixel() function that uses unchecked pixel values as color map indexes. Attackers can supply a crafted color-mapped Targa file whose pixel values exceed the declared color map bounds to crash the converter or leak adjacent memory into the output image.

Created: 2026-10-20 Last update: 2026-11-06 02:00

debian/patches: 3 patches with invalid metadata, 2 patches to forward upstream high

Among the 6 debian patches available in version 2:11.13.03+ds-2 of the package, we noticed the following issues:

3 patches with invalid metadata that ought to be fixed.
2 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-02-26 Last update: 2026-04-02 16:02

3 bugs with a patch to review in the bug tracker normal

The bug tracker contains patches fixing 3 bugs to review: include them, or remove the patch tag.

Created: 2026-09-02 Last update: 2026-11-09 12:30

lintian reports 385 warnings normal

Lintian reports 385 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2026-04-02 Last update: 2026-04-02 18:01

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.7.3).

Created: 2026-03-31 Last update: 2026-04-02 12:00

news

[rss feed]

[2026-07-25] Accepted netpbm-free 2:11.15.04+ds-1 (source) into experimental (Andreas Metzler)
[2026-04-07] netpbm-free 2:11.13.03+ds-2 MIGRATED to testing (Debian testing watch)
[2026-04-02] Accepted netpbm-free 2:11.13.03+ds-2 (source) into unstable (Bastian Germann) (signed by: bage@debian.org)
[2026-04-01] Accepted netpbm-free 2:11.13.03+ds-1 (source) into unstable (Bastian Germann) (signed by: bage@debian.org)
[2026-02-20] netpbm-free 2:11.13.03-1 MIGRATED to testing (Debian testing watch)
[2026-02-15] Accepted netpbm-free 2:11.13.03-1 (source) into unstable (Andreas Metzler)
[2026-01-09] netpbm-free 2:11.13.00-3 MIGRATED to testing (Debian testing watch)
[2026-01-03] Accepted netpbm-free 2:11.13.00-3 (source) into unstable (Andreas Metzler)
[2026-01-03] Accepted netpbm-free 2:11.13.00-2 (source) into unstable (Andreas Metzler)
[2026-01-03] Accepted netpbm-free 2:11.13.00-1 (source) into experimental (Andreas Metzler)
[2025-09-28] Accepted netpbm-free 2:11.12.00-1 (source) into unstable (Andreas Metzler)
[2025-09-12] netpbm-free 2:11.11.01-1 MIGRATED to testing (Debian testing watch)
[2025-09-06] Accepted netpbm-free 2:11.11.01-1 (source) into unstable (Andreas Metzler)
[2025-08-19] netpbm-free 2:11.11.00-2 MIGRATED to testing (Debian testing watch)
[2025-08-11] Accepted netpbm-free 2:11.11.00-2 (source) into unstable (Andreas Metzler)
[2025-06-29] Accepted netpbm-free 2:11.11.00-1 (source) into experimental (Andreas Metzler)
[2025-04-22] netpbm-free 2:11.10.02-1 MIGRATED to testing (Debian testing watch)
[2025-04-12] Accepted netpbm-free 2:11.10.02-1 (source) into unstable (Andreas Metzler)
[2025-03-07] netpbm-free 2:11.09.03-1 MIGRATED to testing (Debian testing watch)
[2025-03-02] Accepted netpbm-free 2:11.09.03-1 (source) into unstable (Andreas Metzler)
[2025-01-26] netpbm-free 2:11.09.02-2 MIGRATED to testing (Debian testing watch)
[2025-01-19] Accepted netpbm-free 2:11.09.02-2 (source) into unstable (Andreas Metzler)
[2024-12-29] Accepted netpbm-free 2:11.09.02-1 (source) into experimental (Andreas Metzler)
[2024-12-10] netpbm-free 2:11.08.02-1 MIGRATED to testing (Debian testing watch)
[2024-12-05] Accepted netpbm-free 2:11.08.02-1 (source) into unstable (Andreas Metzler)
[2024-11-01] netpbm-free 2:11.08.01-1 MIGRATED to testing (Debian testing watch)
[2024-10-26] Accepted netpbm-free 2:11.08.01-1 (source) into unstable (Andreas Metzler)
[2024-10-12] Accepted netpbm-free 2:11.08.00-1 (source) into experimental (Andreas Metzler)
[2024-09-08] Accepted netpbm-free 2:11.07.01-1 (source) into experimental (Andreas Metzler)
[2024-07-21] netpbm-free 2:11.07.00-2 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 20
RC: 0
I&N: 14
M&W: 6
F&P: 0
patch: 3

links

homepage
lintian (0, 385)
buildd: logs, exp, reproducibility, cross
popcon
browse source code
other distros
security tracker
debian patches

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2:11.13.03+ds-2
15 bugs (1 patch)