Debian Package Tracker

general

source: opencv (main)
version: 3.2.0+dfsg-6
maintainer: Debian Science Team (archive) (DMD)
uploaders: Nobuhiro Iwamatsu [DMD] – Sam Hocevar (Debian packages) [DMD]
arch: all any
std-ver: 4.1.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 2.4.9.1+dfsg-1+deb8u1
o-o-sec: 2.4.9.1+dfsg-1+deb8u2
oldstable: 2.4.9.1+dfsg1-2
stable: 3.2.0+dfsg-6
testing: 3.2.0+dfsg-6
unstable: 3.2.0+dfsg-6
exp: 4.1.2+dfsg-2

versioned links

2.4.9.1+dfsg-1+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.4.9.1+dfsg-1+deb8u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.4.9.1+dfsg1-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.2.0+dfsg-6: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.3.0+dfsg-1~exp0: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.4.5+dfsg-1~exp1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.0.1+dfsg-1~exp1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.1.2+dfsg-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.1.2+dfsg-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libopencv-calib3d-dev
libopencv-calib3d3.2
libopencv-contrib-dev
libopencv-contrib3.2
libopencv-core-dev
libopencv-core3.2
libopencv-dev
libopencv-features2d-dev
libopencv-features2d3.2
libopencv-flann-dev
libopencv-flann3.2
libopencv-highgui-dev
libopencv-highgui3.2
libopencv-imgcodecs-dev
libopencv-imgcodecs3.2
libopencv-imgproc-dev
libopencv-imgproc3.2
libopencv-ml-dev
libopencv-ml3.2
libopencv-objdetect-dev
libopencv-objdetect3.2
libopencv-photo-dev
libopencv-photo3.2
libopencv-shape-dev
libopencv-shape3.2
libopencv-stitching-dev
libopencv-stitching3.2
libopencv-superres-dev
libopencv-superres3.2
libopencv-ts-dev
libopencv-video-dev
libopencv-video3.2
libopencv-videoio-dev
libopencv-videoio3.2
libopencv-videostab-dev
libopencv-videostab3.2
libopencv-viz-dev
libopencv-viz3.2
libopencv3.2-java (1 bugs: 0, 1, 0, 0)
libopencv3.2-jni
opencv-data
opencv-doc
python-opencv
python3-opencv

action needed

Multiarch hinter reports 5 issue(s) high

There are issues with the multiarch metadata for this package.

libopencv-core-dev conflicts on /usr/include/opencv2/cvconfig.h on amd64, arm64, and 7 more with 30 combinations
opencv-data could be marked Multi-Arch: foreign
opencv-doc could be marked Multi-Arch: foreign
python-opencv could be marked Multi-Arch: same
python3-opencv could be marked Multi-Arch: same

Created: 2016-09-14 Last update: 2019-10-16 03:45

A new upstream version is available: 4.1.2 high

A new upstream version 4.1.2 is available, you should consider packaging it.

Created: 2019-01-19 Last update: 2019-10-16 03:41

lintian reports 2 errors and 514 warnings high

Lintian reports 2 errors and 514 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2019-08-23 Last update: 2019-10-16 00:48

4 security issues in buster high

There are 4 open security issues in buster.

3 important issues:

CVE-2019-14492: An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.
CVE-2019-14493: An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp.
CVE-2019-14491: An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered<cv::HaarEvaluator> in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.

1 issue skipped by the security teams:

CVE-2017-18009: In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp.

Please fix them.

Created: 2019-04-21 Last update: 2019-10-02 19:14

4 security issues in bullseye high

There are 4 open security issues in bullseye.

4 important issues:

CVE-2019-14492: An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.
CVE-2019-14493: An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp.
CVE-2019-14491: An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered<cv::HaarEvaluator> in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.
CVE-2017-18009: In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp.

Please fix them.

Created: 2019-07-07 Last update: 2019-10-02 19:14

4 security issues in sid high

There are 4 open security issues in sid.

4 important issues:

CVE-2019-14492: An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.
CVE-2019-14493: An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp.
CVE-2019-14491: An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered<cv::HaarEvaluator> in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.
CVE-2017-18009: In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp.

Please fix them.

Created: 2019-04-21 Last update: 2019-10-02 19:14

22 security issues in stretch high

There are 22 open security issues in stretch.

3 important issues:

CVE-2019-14492: An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.
CVE-2019-14493: An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp.
CVE-2019-14491: An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered<cv::HaarEvaluator> in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.

19 issues skipped by the security teams:

CVE-2017-12606: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the function FillColorRow4 in utils.cpp when reading an image file by using cv::imread.
CVE-2017-12605: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillColorRow8 function in utils.cpp when reading an image file by using cv::imread.
CVE-2017-12604: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillUniColor function in utils.cpp when reading an image file by using cv::imread.
CVE-2017-12603: OpenCV (Open Source Computer Vision Library) through 3.3 has an invalid write in the cv::RLByteStream::getBytes function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 2-opencv-heapoverflow-fseek test case.
CVE-2017-12602: OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (memory consumption) issue, as demonstrated by the 10-opencv-dos-memory-exhaust test case.
CVE-2017-12601: OpenCV (Open Source Computer Vision Library) through 3.3 has a buffer overflow in the cv::BmpDecoder::readData function in modules/imgcodecs/src/grfmt_bmp.cpp when reading an image file by using cv::imread, as demonstrated by the 4-buf-overflow-readData-memcpy test case.
CVE-2017-12600: OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (CPU consumption) issue, as demonstrated by the 11-opencv-dos-cpu-exhaust test case.
CVE-2017-17760: OpenCV 3.3.1 has a Buffer Overflow in the cv::PxMDecoder::readData function in grfmt_pxm.cpp, because an incorrect size value is used.
CVE-2017-12597: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread.
CVE-2017-12599: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the function icvCvt_BGRA2BGR_8u_C4C3R when reading an image file by using cv::imread.
CVE-2017-12598: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the cv::RBaseStream::readBlock function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 8-opencv-invalid-read-fread test case.
CVE-2017-1000450: In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
CVE-2016-1517: OpenCV 3.0.0 allows remote attackers to cause a denial of service (segfault) via vectors involving corrupt chunks.
CVE-2016-1516: OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code.
CVE-2017-12864: In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
CVE-2017-12863: In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function PxMDecoder::readData has an integer overflow when calculate src_pitch. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
CVE-2017-12862: In modules/imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is small than expected, which will cause copy buffer overflow later. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
CVE-2018-5269: In OpenCV 3.3.1, an assertion failure happens in cv::RBaseStream::setPos in modules/imgcodecs/src/bitstrm.cpp because of an incorrect integer cast.
CVE-2018-5268: In OpenCV 3.3.1, a heap-based buffer overflow happens in cv::Jpeg2KDecoder::readComponent8u in modules/imgcodecs/src/grfmt_jpeg2000.cpp when parsing a crafted image file.

Please fix them.

Created: 2017-04-10 Last update: 2019-10-02 19:14

Does not build reproducibly during testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2018-09-11 Last update: 2019-10-16 03:44

6 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit b7748eed34d4a38a418eb89e8c53f4457723ac05
Author: Mo Zhou <cdluminate@gmail.com>
Date:   Tue Oct 15 11:43:10 2019 +0800

    dch: release to experimental

commit ad980239b187de8280fde42fce2ced595b37ad1a
Author: Mo Zhou <cdluminate@gmail.com>
Date:   Tue Oct 15 11:04:14 2019 +0800

    gbp-dch: update

commit 4a93fe774de61ef39c741a50ee1ad309fa431090
Author: Mo Zhou <cdluminate@gmail.com>
Date:   Tue Oct 15 10:57:06 2019 +0800

    Revert "Bump VTK B-D from libvtk6-dev to libvtk7-dev."
    
    This reverts commit bac1da8ad9adc8c1ff8862f8b42aa4f9a30618f2.

commit 48161f2fa710c29a843c4ff4960ce156ce8ec8cb
Author: Mo Zhou <cdluminate@gmail.com>
Date:   Tue Oct 15 10:39:10 2019 +0800

    gbp-dch: update

commit 545d77dc84dcf4554aecd4848a2d4b8f07546fdc
Author: Mo Zhou <cdluminate@gmail.com>
Date:   Tue Oct 15 10:36:18 2019 +0800

    Deprecate the Python2 package: python-opencv.

commit 3e0ca70b4f31fcb92c3658e61c27c9b22dd474b7
Author: Mo Zhou <cdluminate@gmail.com>
Date:   Tue Oct 15 10:31:56 2019 +0800

    Don't run unit tests on mipsel at all.

Created: 2019-09-28 Last update: 2019-10-15 11:33

6 ignored security issues in jessie low

There are 6 open security issues in jessie.

6 issues skipped by the security teams:

CVE-2017-12602: OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (memory consumption) issue, as demonstrated by the 10-opencv-dos-memory-exhaust test case.
CVE-2017-12600: OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (CPU consumption) issue, as demonstrated by the 11-opencv-dos-cpu-exhaust test case.
CVE-2016-1517: OpenCV 3.0.0 allows remote attackers to cause a denial of service (segfault) via vectors involving corrupt chunks.
CVE-2019-14492: An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.
CVE-2019-14493: An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp.
CVE-2019-14491: An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered<cv::HaarEvaluator> in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.

Please fix them.

Created: 2017-04-10 Last update: 2019-10-02 19:14

Build log checks report 2 warnings low

Build log checks report 2 warnings

Created: 2019-09-03 Last update: 2019-09-03 20:42

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.4.1 instead of 4.1.1).

Created: 2018-01-08 Last update: 2019-09-29 23:40

testing migrations

This package will soon be part of the auto-hdf5 transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.
This package will soon be part of the auto-opencv transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.
This package will soon be part of the auto-gdal transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.

news

[rss feed]

[2019-10-15] Accepted opencv 4.1.2+dfsg-2 (source) into experimental (Mo Zhou) (signed by: Zhou Mo)
[2019-10-13] Accepted opencv 4.1.2+dfsg-1 (source) into experimental (Mo Zhou) (signed by: Zhou Mo)
[2019-09-28] Accepted opencv 4.1.1+dfsg-3 (source) into experimental (Mo Zhou) (signed by: Zhou Mo)
[2019-09-20] Accepted opencv 4.1.1+dfsg-2 (source) into experimental (Mo Zhou) (signed by: Zhou Mo)
[2019-09-14] Accepted opencv 4.1.1+dfsg-1 (source amd64 all) into experimental, experimental (Mo Zhou) (signed by: Zhou Mo)
[2019-09-14] Accepted opencv 4.1.0+dfsg-1 (source amd64 all) into experimental, experimental (Mo Zhou) (signed by: Zhou Mo)
[2019-02-22] opencv 3.2.0+dfsg-6 MIGRATED to testing (Debian testing watch)
[2019-02-12] Accepted opencv 3.2.0+dfsg-6 (source) into unstable (Mattia Rizzolo)
[2019-02-04] Accepted opencv 4.0.1+dfsg-1~exp1 (source amd64 all) into experimental, experimental (Mo Zhou) (signed by: Zhou Mo)
[2018-12-30] Accepted opencv 3.4.5+dfsg-1~exp1 (source) into experimental (Mo Zhou) (signed by: Zhou Mo)
[2018-12-19] opencv 3.2.0+dfsg-5 MIGRATED to testing (Debian testing watch)
[2018-12-03] Accepted opencv 3.4.4+dfsg-1~exp1 (source amd64 all) into experimental, experimental (Mo Zhou) (signed by: Zhou Mo)
[2018-11-28] Accepted opencv 3.2.0+dfsg-5 (source) into unstable (Mattia Rizzolo)
[2018-07-22] Accepted opencv 2.4.9.1+dfsg-1+deb8u2 (source all amd64) into oldstable (Thorsten Alteholz)
[2018-07-19] opencv 3.2.0+dfsg-4.1 MIGRATED to testing (Debian testing watch)
[2018-07-13] Accepted opencv 3.2.0+dfsg-4.1 (source) into unstable (Sebastian Ramacher)
[2018-04-18] Accepted opencv 2.3.1-11+deb7u4 (source all amd64) into oldoldstable (Antoine Beaupré)
[2018-01-08] Accepted opencv 2.3.1-11+deb7u3 (source all amd64) into oldoldstable (Thorsten Alteholz)
[2017-11-17] opencv 3.2.0+dfsg-4 MIGRATED to testing (Debian testing watch)
[2017-11-11] Accepted opencv 3.2.0+dfsg-4 (source) into unstable (Mattia Rizzolo)
[2017-10-29] Accepted opencv 3.3.0+dfsg-1~exp0 (source amd64 all) into experimental, experimental (Mattia Rizzolo)
[2017-10-28] opencv 3.2.0+dfsg-3 MIGRATED to testing (Debian testing watch)
[2017-10-27] opencv 3.2.0+dfsg-3 MIGRATED to testing (Debian testing watch)
[2017-10-17] Accepted opencv 3.2.0+dfsg-3 (source) into unstable (Mattia Rizzolo)
[2017-10-16] Accepted opencv 3.2.0+dfsg-2 (source) into unstable (Mattia Rizzolo)
[2017-10-13] Accepted opencv 3.2.0+dfsg-1 (source) into unstable (Mattia Rizzolo)
[2017-09-29] Accepted opencv 2.3.1-11+deb7u2 (source all amd64) into oldoldstable (Thorsten Alteholz)
[2017-07-31] Accepted opencv 3.2.0+dfsg-1~exp2 (source) into experimental (Mattia Rizzolo)
[2017-07-13] Accepted opencv 3.2.0+dfsg-1~exp1 (source amd64 all) into experimental, experimental (Nobuhiro Iwamatsu)
[2017-05-02] Accepted opencv 3.1.0+dfsg1-1~exp1 (source amd64 all) into experimental, experimental (Mattia Rizzolo)

bugs [bug history graph]

all: 3
RC: 0
I&N: 3
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (2, 514)
buildd: logs, exp, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 3.2.0+dfsg-6
37 bugs