Problems while searching for a new upstream version
high
uscan had problems while searching for a new upstream version:
In debian/watch no matching files for watch line
http://pngquant.org/releases.html .*/pngquant-(\d[.\d]+)-src\.tar\.bz2
Standards version of the package is outdated.
high
The package is severely out of date with respect to the Debian Policy.The package should be updated to follow the last version of Debian Policy
(Standards-Version 4.1.4 instead of
3.9.6).
vcswatch reports that
this package has a new version ready in the VCS. You should consider uploading
into the archive.
The Vcs URL git://anonscm.debian.org/pkg-phototools/pngquant.git is deprecated/defunct, https://anonscm.debian.org/git/pkg-phototools/pngquant.git was tried instead. Please update the Vcs field in debian/control.
The current maintainer is looking for someone who can help with
the maintenance of this package. If you are interested in this
package, please consider helping out. One way you can help is
offer to be a co-maintainer or triage bugs in the BTS. Please see bug number #863328 for more information.
The URL(s) for this package had some recent persistent issueslow
DUCK reports some issues concerning upstream URLs defined for this package.
CVE-2016-5735: Integer overflow in the rwpng_read_image24_libpng function in rwpng.c in pngquant 2.7.0 allows remote attackers to have unspecified impact via a crafted PNG file, which triggers a buffer overflow.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/p/pngquant.png){kind=link}