opendoas - Debian Package Tracker

general

source: opendoas (main)
version: 6.8.2-1
maintainer: Scupake (DMD)
arch: any
std-ver: 4.6.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 6.8.2-1
stable: 6.8.2-1
testing: 6.8.2-1
unstable: 6.8.2-1

versioned links

6.8.2-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

doas (2 bugs: 0, 0, 2, 0)
opendoas (1 bugs: 0, 1, 0, 0)

action needed

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2023-28339: OpenDoas through 6.8.2, when TIOCSTI is available, allows privilege escalation because of sharing a terminal with the original session. NOTE: TIOCSTI is unavailable in OpenBSD 6.0 and later, and can be made unavailable in the Linux kernel 6.2 and later.

Created: 2023-03-15 Last update: 2026-08-02 20:32

1 security issue in forky high

There is 1 open security issue in forky.

1 important issue:

CVE-2023-28339: OpenDoas through 6.8.2, when TIOCSTI is available, allows privilege escalation because of sharing a terminal with the original session. NOTE: TIOCSTI is unavailable in OpenBSD 6.0 and later, and can be made unavailable in the Linux kernel 6.2 and later.

Created: 2025-08-09 Last update: 2026-08-02 20:32

1 new commit since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit d4418cdd43d37ca3791966989b5a91fdc856a8ec
Author: Scupake <scupake@riseup.net>
Date:   Sat Mar 18 21:45:17 2023 +0100

    change "as root" to "any user" in the example file

https://salsa.debian.org/api/v4/projects/debian%2Fopendoas API request failed: 401 Unauthorized at /srv/qa.debian.org/data/vcswatch/vcswatch line 410.

Created: 2023-03-18 Last update: 2026-08-04 14:33

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.6.1).

Created: 2022-12-17 Last update: 2026-03-31 15:01

news

[rss feed]

[2022-07-29] opendoas 6.8.2-1 MIGRATED to testing (Debian testing watch)
[2022-07-23] Accepted opendoas 6.8.2-1 (source amd64) into unstable, unstable (Debian FTP Masters) (signed by: Ryan Kavanagh)

bugs [bug history graph]

all: 5
RC: 0
I&N: 3
M&W: 2
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs, reproducibility, cross
popcon
browse source code
other distros
security tracker
debian patches

ubuntu

[Information about Ubuntu for Debian Developers]

version: 6.8.2-1build1