oggvideotools - Debian Package Tracker

general

source: oggvideotools (main)
version: 0.9.1-6
maintainer: Debian Multimedia Maintainers (archive) (DMD)
uploaders: Martin Steghöfer [DMD] – Ralph Giles [DMD] – Petter Reinholdtsen [DMD]
arch: any
std-ver: 4.6.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.9.1-5
oldstable: 0.9.1-5.1
stable: 0.9.1-6
testing: 0.9.1-6
unstable: 0.9.1-6

versioned links

0.9.1-5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.9.1-5.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.9.1-6: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

oggvideotools (1 bugs: 0, 1, 0, 0)

action needed

Marked for autoremoval on 27 October due to pyside2: #1051886 high

Version 0.9.1-6 of oggvideotools is marked for autoremoval from testing on Fri 27 Oct 2023. It depends (transitively) on pyside2, affected by #1051886. You should try to prevent the removal by fixing these RC bugs.

Created: 2023-09-20 Last update: 2023-09-30 19:06

3 security issues in trixie high

There are 3 open security issues in trixie.

3 important issues:

CVE-2020-21722: Buffer Overflow vulnerability in oggvideotools 0.9.1 allows remote attackers to run arbitrary code via opening of crafted ogg file.
CVE-2020-21723: A Segmentation Fault issue discovered StreamSerializer::extractStreams function in streamSerializer.cpp in oggvideotools 0.9.1 allows remote attackers to cause a denial of service (crash) via opening of crafted ogg file.
CVE-2020-21724: Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrary code via opening of crafted ogg file.

Created: 2023-08-25 Last update: 2023-09-05 20:39

3 security issues in sid high

There are 3 open security issues in sid.

3 important issues:

CVE-2020-21722: Buffer Overflow vulnerability in oggvideotools 0.9.1 allows remote attackers to run arbitrary code via opening of crafted ogg file.
CVE-2020-21723: A Segmentation Fault issue discovered StreamSerializer::extractStreams function in streamSerializer.cpp in oggvideotools 0.9.1 allows remote attackers to cause a denial of service (crash) via opening of crafted ogg file.
CVE-2020-21724: Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrary code via opening of crafted ogg file.

Created: 2023-08-25 Last update: 2023-09-05 20:39

lintian reports 1 error and 1 warning high

Lintian reports 1 error and 1 warning about this package. You should make the package lintian clean getting rid of them.

Created: 2022-07-30 Last update: 2023-02-05 04:08

4 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 91e86c49527fb66f71dd35f969a8f44c67646e70
Merge: 4ffe2f7 885f616
Author: Dennis Braun <d_braun@kabelmail.de>
Date:   Sun Nov 6 19:29:54 2022 +0000

    Merge branch 'lintian-fixes' into 'master'
    
    Fix some issues reported by lintian
    
    See merge request multimedia-team/oggvideotools!1

commit 885f6165855e2b11c63b61e264b18e7583df31ff
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Wed Nov 2 10:10:28 2022 +0000

    Update standards version to 4.6.1, no changes needed.
    
    Changes-By: lintian-brush
    Fixes: lintian: out-of-date-standards-version
    See-also: https://lintian.debian.org/tags/out-of-date-standards-version.html

commit e80182ba4a870fd2ce14d36065153736a5b3777b
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Wed Nov 2 10:10:23 2022 +0000

    Fix day-of-week for changelog entry 0.7b.
    
    Changes-By: lintian-brush
    Fixes: lintian: debian-changelog-has-wrong-day-of-week
    See-also: https://lintian.debian.org/tags/debian-changelog-has-wrong-day-of-week.html

commit 6f9f86c4fc8d563e62046c038f2d68f6e921a8da
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Wed Nov 2 10:10:22 2022 +0000

    Set upstream metadata fields: Archive, Bug-Database, Name.
    
    Changes-By: lintian-brush
    Fixes: lintian: upstream-metadata-file-is-missing
    See-also: https://lintian.debian.org/tags/upstream-metadata-file-is-missing.html

Created: 2022-11-06 Last update: 2023-09-26 21:16

3 low-priority security issues in bullseye low

There are 3 open security issues in bullseye.

3 issues left for the package maintainer to handle:

CVE-2020-21722: (needs triaging) Buffer Overflow vulnerability in oggvideotools 0.9.1 allows remote attackers to run arbitrary code via opening of crafted ogg file.
CVE-2020-21723: (needs triaging) A Segmentation Fault issue discovered StreamSerializer::extractStreams function in streamSerializer.cpp in oggvideotools 0.9.1 allows remote attackers to cause a denial of service (crash) via opening of crafted ogg file.
CVE-2020-21724: (needs triaging) Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrary code via opening of crafted ogg file.

You can find information about how to handle these issues in the security team's documentation.

Created: 2023-08-25 Last update: 2023-09-05 20:39

3 low-priority security issues in bookworm low

There are 3 open security issues in bookworm.

3 issues left for the package maintainer to handle:

CVE-2020-21722: (needs triaging) Buffer Overflow vulnerability in oggvideotools 0.9.1 allows remote attackers to run arbitrary code via opening of crafted ogg file.
CVE-2020-21723: (needs triaging) A Segmentation Fault issue discovered StreamSerializer::extractStreams function in streamSerializer.cpp in oggvideotools 0.9.1 allows remote attackers to cause a denial of service (crash) via opening of crafted ogg file.
CVE-2020-21724: (needs triaging) Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrary code via opening of crafted ogg file.

You can find information about how to handle these issues in the security team's documentation.

Created: 2023-08-25 Last update: 2023-09-05 20:39

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2023-09-03 Last update: 2023-09-03 11:33

debian/patches: 7 patches to forward upstream low

Among the 7 debian patches available in version 0.9.1-6 of the package, we noticed the following issues:

7 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-02-26 Last update: 2023-02-26 15:54

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.6.2 instead of 4.6.0).

Created: 2022-05-11 Last update: 2022-12-17 19:18

news

[rss feed]

[2022-07-27] oggvideotools 0.9.1-6 MIGRATED to testing (Debian testing watch)
[2022-07-24] oggvideotools REMOVED from testing (Debian testing watch)
[2021-09-20] oggvideotools 0.9.1-6 MIGRATED to testing (Debian testing watch)
[2021-09-10] Accepted oggvideotools 0.9.1-6 (source) into unstable (Boyuan Yang)
[2020-06-03] oggvideotools 0.9.1-5.1 MIGRATED to testing (Debian testing watch)
[2020-06-01] Accepted oggvideotools 0.9.1-5.1 (source) into unstable (Adrian Bunk)
[2019-04-07] oggvideotools 0.9.1-5 MIGRATED to testing (Debian testing watch)
[2019-04-05] Accepted oggvideotools 0.9.1-5 (source) into unstable (Andreas Tille)
[2019-02-06] oggvideotools 0.9.1-4.1 MIGRATED to testing (Debian testing watch)
[2019-02-03] Accepted oggvideotools 0.9.1-4.1 (source) into unstable (Adrian Bunk)
[2018-06-23] oggvideotools REMOVED from testing (Debian testing watch)
[2017-07-07] oggvideotools 0.9.1-4 MIGRATED to testing (Debian testing watch)
[2017-07-02] Accepted oggvideotools 0.9.1-4 (source) into unstable (Petter Reinholdtsen)
[2016-12-15] oggvideotools 0.9.1-3 MIGRATED to testing (Debian testing watch)
[2016-12-03] Accepted oggvideotools 0.9.1-3 (source) into unstable (Petter Reinholdtsen)
[2016-09-11] oggvideotools 0.9.1-2 MIGRATED to testing (Debian testing watch)
[2016-09-05] Accepted oggvideotools 0.9.1-2 (source) into unstable (Petter Reinholdtsen)
[2016-09-05] Accepted oggvideotools 0.9.1-1 (source) into unstable (Petter Reinholdtsen)
[2016-07-15] oggvideotools REMOVED from testing (Debian testing watch)
[2015-12-31] oggvideotools 0.8a-7 MIGRATED to testing (Debian testing watch)
[2015-12-20] Accepted oggvideotools 0.8a-7 (source) into unstable (Petter Reinholdtsen)
[2015-10-03] oggvideotools 0.8a-6 MIGRATED to testing (Britney)
[2015-09-22] Accepted oggvideotools 0.8a-6 (source) into unstable (Petter Reinholdtsen) (signed by: Matteo F. Vescovi)
[2014-11-05] oggvideotools 0.8a-4 MIGRATED to testing (Britney)
[2014-10-25] Accepted oggvideotools 0.8a-4 (source amd64) into unstable (Petter Reinholdtsen)
[2014-10-22] Accepted oggvideotools 0.8a-3 (source amd64) into unstable (Petter Reinholdtsen)
[2014-10-22] Accepted oggvideotools 0.8a-2 (source amd64) into unstable (Petter Reinholdtsen)
[2012-06-13] oggvideotools 0.8a-1 MIGRATED to testing (Debian testing watch)
[2012-06-02] Accepted oggvideotools 0.8a-1 (source amd64) (Ron Lee)
[2012-05-27] Accepted oggvideotools 0.8-1.1 (source amd64) (gregor herrmann)

bugs [bug history graph]

all: 4 5
RC: 0
I&N: 4 5
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (1, 1)
buildd: logs, checks, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
screenshots
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 0.9.1-6
2 bugs