Debian Package Tracker

general

source: opencv (main)
version: 3.2.0+dfsg-6
maintainer: Debian Science Team (archive) (DMD)
uploaders: Nobuhiro Iwamatsu [DMD] – Sam Hocevar (Debian packages) [DMD]
arch: all any
std-ver: 4.1.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 2.4.9.1+dfsg-1+deb8u1
o-o-sec: 2.4.9.1+dfsg-1+deb8u2
oldstable: 2.4.9.1+dfsg1-2
stable: 3.2.0+dfsg-6
testing: 3.2.0+dfsg-6
unstable: 3.2.0+dfsg-6
exp: 4.0.1+dfsg-1~exp1
NEW/experimental: 4.1.0+dfsg-1

versioned links

2.4.9.1+dfsg-1+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.4.9.1+dfsg-1+deb8u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.4.9.1+dfsg1-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.2.0+dfsg-6: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.3.0+dfsg-1~exp0: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.4.5+dfsg-1~exp1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.0.1+dfsg-1~exp1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libopencv-calib3d-dev
libopencv-calib3d3.2
libopencv-contrib-dev
libopencv-contrib3.2
libopencv-core-dev
libopencv-core3.2
libopencv-dev
libopencv-features2d-dev
libopencv-features2d3.2
libopencv-flann-dev
libopencv-flann3.2
libopencv-highgui-dev
libopencv-highgui3.2
libopencv-imgcodecs-dev
libopencv-imgcodecs3.2
libopencv-imgproc-dev
libopencv-imgproc3.2
libopencv-ml-dev
libopencv-ml3.2
libopencv-objdetect-dev
libopencv-objdetect3.2
libopencv-photo-dev
libopencv-photo3.2
libopencv-shape-dev
libopencv-shape3.2
libopencv-stitching-dev
libopencv-stitching3.2
libopencv-superres-dev
libopencv-superres3.2
libopencv-ts-dev
libopencv-video-dev
libopencv-video3.2
libopencv-videoio-dev
libopencv-videoio3.2
libopencv-videostab-dev
libopencv-videostab3.2
libopencv-viz-dev
libopencv-viz3.2
libopencv3.2-java
libopencv3.2-jni
opencv-data
opencv-doc
python-opencv
python3-opencv

action needed

A new upstream version is available: 4.1.1 high

A new upstream version 4.1.1 is available, you should consider packaging it.

Created: 2019-01-19 Last update: 2019-08-24 20:32

Multiarch hinter reports 5 issue(s) high

There are issues with the multiarch metadata for this package.

libopencv-core-dev conflicts on /usr/include/opencv2/cvconfig.h on amd64, arm64, and 8 more with 46 combinations
opencv-data could be marked Multi-Arch: foreign
opencv-doc could be marked Multi-Arch: foreign
python-opencv could be marked Multi-Arch: same
python3-opencv could be marked Multi-Arch: same

Created: 2016-09-14 Last update: 2019-08-23 04:07

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2017-18009: In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp.

Please fix it.

Created: 2019-04-21 Last update: 2019-07-07 09:01

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2017-18009: In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp.

Please fix it.

Created: 2019-07-07 Last update: 2019-07-07 09:00

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2019-04-01 Last update: 2019-08-24 21:41

Does not build reproducibly during testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2018-09-11 Last update: 2019-08-24 18:57

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 4.1.1+dfsg-1, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 19586ede87822190831b09621ef8558b785c30e5
Author: Mo Zhou <cdluminate@gmail.com>
Date:   Sat Aug 24 14:58:24 2019 +0800

    gbp-dch: update

commit 3b0ea4154af8c063ca647f9bdd72313f086522e7
Merge: a15eec9fe 40816e5ca
Author: Mo Zhou <cdluminate@gmail.com>
Date:   Sat Aug 24 14:44:55 2019 +0800

    Update upstream source from tag 'upstream/4.1.1+dfsg'
    
    Update to upstream version '4.1.1+dfsg'
    with Debian dir e7771a5c6fada0cf273e39fc0fce732d1b92e411

commit 40816e5ca69fe94946d012b957b8491ccd94f7ae
Author: Mo Zhou <cdluminate@gmail.com>
Date:   Sat Aug 24 14:42:44 2019 +0800

    New upstream version 4.1.1+dfsg

commit a15eec9feb69f24edd2c95db8cc473f4fa4b2456
Author: Mo Zhou <cdluminate@gmail.com>
Date:   Thu Jul 18 20:10:12 2019 +0800

    Re-enable dh_auto_tests and disable performance tests.

Created: 2019-04-15 Last update: 2019-08-24 08:16

lintian reports 2 warnings normal

Lintian reports 2 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2019-08-23 Last update: 2019-08-23 03:48

1 ignored security issue in buster low

There is 1 open security issue in buster.

1 issue skipped by the security teams:

CVE-2017-18009: In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp.

Please fix it.

Created: 2019-04-21 Last update: 2019-07-07 09:01

3 ignored security issues in jessie low

There are 3 open security issues in jessie.

3 issues skipped by the security teams:

CVE-2017-12600: OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (CPU consumption) issue, as demonstrated by the 11-opencv-dos-cpu-exhaust test case.
CVE-2017-12602: OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (memory consumption) issue, as demonstrated by the 10-opencv-dos-memory-exhaust test case.
CVE-2016-1517: OpenCV 3.0.0 allows remote attackers to cause a denial of service (segfault) via vectors involving corrupt chunks.

Please fix them.

Created: 2017-04-10 Last update: 2019-07-07 09:01

19 ignored security issues in stretch low

There are 19 open security issues in stretch.

19 issues skipped by the security teams:

CVE-2017-17760: OpenCV 3.3.1 has a Buffer Overflow in the cv::PxMDecoder::readData function in grfmt_pxm.cpp, because an incorrect size value is used.
CVE-2017-12606: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the function FillColorRow4 in utils.cpp when reading an image file by using cv::imread.
CVE-2017-1000450: In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
CVE-2017-12601: OpenCV (Open Source Computer Vision Library) through 3.3 has a buffer overflow in the cv::BmpDecoder::readData function in modules/imgcodecs/src/grfmt_bmp.cpp when reading an image file by using cv::imread, as demonstrated by the 4-buf-overflow-readData-memcpy test case.
CVE-2017-12603: OpenCV (Open Source Computer Vision Library) through 3.3 has an invalid write in the cv::RLByteStream::getBytes function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 2-opencv-heapoverflow-fseek test case.
CVE-2017-12863: In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function PxMDecoder::readData has an integer overflow when calculate src_pitch. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
CVE-2017-12600: OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (CPU consumption) issue, as demonstrated by the 11-opencv-dos-cpu-exhaust test case.
CVE-2017-12604: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillUniColor function in utils.cpp when reading an image file by using cv::imread.
CVE-2017-12862: In modules/imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is small than expected, which will cause copy buffer overflow later. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
CVE-2017-12598: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the cv::RBaseStream::readBlock function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 8-opencv-invalid-read-fread test case.
CVE-2017-12864: In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
CVE-2017-12597: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread.
CVE-2017-12599: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the function icvCvt_BGRA2BGR_8u_C4C3R when reading an image file by using cv::imread.
CVE-2016-1517: OpenCV 3.0.0 allows remote attackers to cause a denial of service (segfault) via vectors involving corrupt chunks.
CVE-2016-1516: OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code.
CVE-2018-5268: In OpenCV 3.3.1, a heap-based buffer overflow happens in cv::Jpeg2KDecoder::readComponent8u in modules/imgcodecs/src/grfmt_jpeg2000.cpp when parsing a crafted image file.
CVE-2017-12602: OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (memory consumption) issue, as demonstrated by the 10-opencv-dos-memory-exhaust test case.
CVE-2018-5269: In OpenCV 3.3.1, an assertion failure happens in cv::RBaseStream::setPos in modules/imgcodecs/src/bitstrm.cpp because of an incorrect integer cast.
CVE-2017-12605: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillColorRow8 function in utils.cpp when reading an image file by using cv::imread.

Please fix them.

Created: 2017-04-10 Last update: 2019-07-07 09:01

Build log checks report 2 warnings low

Build log checks report 2 warnings

Created: 2018-11-28 Last update: 2019-01-03 16:37

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.4.0 instead of 4.1.1).

Created: 2018-01-08 Last update: 2019-07-08 20:09

testing migrations

This package will soon be part of the auto-gdal transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.
This package will soon be part of the auto-hdf5 transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.
This package will soon be part of the auto-ilmbase transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.
This package will soon be part of the auto-openexr transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.
This package will soon be part of the auto-opencv transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.

news

[rss feed]

[2019-02-22] opencv 3.2.0+dfsg-6 MIGRATED to testing (Debian testing watch)
[2019-02-12] Accepted opencv 3.2.0+dfsg-6 (source) into unstable (Mattia Rizzolo)
[2019-02-04] Accepted opencv 4.0.1+dfsg-1~exp1 (source amd64 all) into experimental, experimental (Mo Zhou) (signed by: Zhou Mo)
[2018-12-30] Accepted opencv 3.4.5+dfsg-1~exp1 (source) into experimental (Mo Zhou) (signed by: Zhou Mo)
[2018-12-19] opencv 3.2.0+dfsg-5 MIGRATED to testing (Debian testing watch)
[2018-12-03] Accepted opencv 3.4.4+dfsg-1~exp1 (source amd64 all) into experimental, experimental (Mo Zhou) (signed by: Zhou Mo)
[2018-11-28] Accepted opencv 3.2.0+dfsg-5 (source) into unstable (Mattia Rizzolo)
[2018-07-22] Accepted opencv 2.4.9.1+dfsg-1+deb8u2 (source all amd64) into oldstable (Thorsten Alteholz)
[2018-07-19] opencv 3.2.0+dfsg-4.1 MIGRATED to testing (Debian testing watch)
[2018-07-13] Accepted opencv 3.2.0+dfsg-4.1 (source) into unstable (Sebastian Ramacher)
[2018-04-18] Accepted opencv 2.3.1-11+deb7u4 (source all amd64) into oldoldstable (Antoine Beaupré)
[2018-01-08] Accepted opencv 2.3.1-11+deb7u3 (source all amd64) into oldoldstable (Thorsten Alteholz)
[2017-11-17] opencv 3.2.0+dfsg-4 MIGRATED to testing (Debian testing watch)
[2017-11-11] Accepted opencv 3.2.0+dfsg-4 (source) into unstable (Mattia Rizzolo)
[2017-10-29] Accepted opencv 3.3.0+dfsg-1~exp0 (source amd64 all) into experimental, experimental (Mattia Rizzolo)
[2017-10-28] opencv 3.2.0+dfsg-3 MIGRATED to testing (Debian testing watch)
[2017-10-27] opencv 3.2.0+dfsg-3 MIGRATED to testing (Debian testing watch)
[2017-10-17] Accepted opencv 3.2.0+dfsg-3 (source) into unstable (Mattia Rizzolo)
[2017-10-16] Accepted opencv 3.2.0+dfsg-2 (source) into unstable (Mattia Rizzolo)
[2017-10-13] Accepted opencv 3.2.0+dfsg-1 (source) into unstable (Mattia Rizzolo)
[2017-09-29] Accepted opencv 2.3.1-11+deb7u2 (source all amd64) into oldoldstable (Thorsten Alteholz)
[2017-07-31] Accepted opencv 3.2.0+dfsg-1~exp2 (source) into experimental (Mattia Rizzolo)
[2017-07-13] Accepted opencv 3.2.0+dfsg-1~exp1 (source amd64 all) into experimental, experimental (Nobuhiro Iwamatsu)
[2017-05-02] Accepted opencv 3.1.0+dfsg1-1~exp1 (source amd64 all) into experimental, experimental (Mattia Rizzolo)
[2017-04-24] Accepted opencv 3.1.0+dfsg-1~exp5 (source) into experimental (Mattia Rizzolo)
[2017-04-23] Accepted opencv 3.1.0+dfsg-1~exp4 (source) into experimental (Mattia Rizzolo)
[2017-04-09] opencv 2.4.9.1+dfsg1-2 MIGRATED to testing (Debian testing watch)
[2017-04-05] Accepted opencv 3.1.0+dfsg-1~exp3 (source amd64 all) into experimental, experimental (Mattia Rizzolo)
[2017-04-03] Accepted opencv 2.4.9.1+dfsg1-2 (source) into unstable (Mattia Rizzolo)
[2017-03-05] opencv 2.4.9.1+dfsg1-1 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 2
RC: 0
I&N: 2
M&W: 0
F&P: 0
patch: 1

links

homepage
lintian (0, 2)
buildd: logs, exp, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 3.2.0+dfsg-6
37 bugs