Debian Package Tracker
Register | Log in
Subscribe

snappy-java

Choose email to subscribe with

general
  • source: snappy-java (main)
  • version: 1.1.10.8-1
  • maintainer: Debian Java Maintainers (archive) (DMD)
  • uploaders: Andreas Tille [DMD] – Charles Plessy [DMD]
  • arch: all any
  • std-ver: 4.7.2
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • oldstable: 1.1.8.3-1
  • stable: 1.1.8.3-1
  • testing: 1.1.10.7-1
  • unstable: 1.1.10.8-1
versioned links
  • 1.1.8.3-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1.1.10.7-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1.1.10.8-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • libsnappy-java
  • libsnappy-jni
action needed
Multiarch hinter reports 1 issue(s) normal
There are issues with the multiarch metadata for this package.
  • libsnappy-jni could be marked Multi-Arch: same
Created: 2025-03-25 Last update: 2025-08-09 03:01
1 low-priority security issue in bookworm low

There is 1 open security issue in bookworm.

1 issue left for the package maintainer to handle:
  • CVE-2023-43642: (needs triaging) snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. The SnappyInputStream was found to be vulnerable to Denial of Service (DoS) attacks when decompressing data with a too large chunk size. Due to missing upper bound check on chunk length, an unrecoverable fatal error can occur. All versions of snappy-java including the latest released version 1.1.10.3 are vulnerable to this issue. A fix has been introduced in commit `9f8c3cf74` which will be included in the 1.1.10.4 release. Users are advised to upgrade. Users unable to upgrade should only accept compressed data from trusted sources.

You can find information about how to handle this issue in the security team's documentation.

Created: 2023-10-01 Last update: 2025-08-08 23:30
testing migrations
  • excuses:
    • Migration status for snappy-java (1.1.10.7-1 to 1.1.10.8-1): BLOCKED: Needs an approval (either due to a freeze, the source suite or a manual hint)
    • Issues preventing migration:
    • ∙ ∙ Not touching package due to block request by freeze (Follow the freeze policy when applying for an unblock)
    • ∙ ∙ Too young, only 0 of 5 days old
    • Additional info:
    • ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/s/snappy-java.html
    • ∙ ∙ Waiting for reproducibility test results on amd64 - info ♻
    • ∙ ∙ Waiting for reproducibility test results on arm64 - info ♻
    • Not considered
news
[rss feed]
  • [2025-08-08] Accepted snappy-java 1.1.10.8-1 (source) into unstable (tony mancill)
  • [2024-11-23] snappy-java 1.1.10.7-1 MIGRATED to testing (Debian testing watch)
  • [2024-11-18] Accepted snappy-java 1.1.10.7-1 (source) into unstable (tony mancill)
  • [2024-04-13] snappy-java 1.1.10.5-2 MIGRATED to testing (Debian testing watch)
  • [2024-04-07] Accepted snappy-java 1.1.10.5-2 (source) into unstable (tony mancill)
  • [2023-10-10] snappy-java 1.1.10.5-1 MIGRATED to testing (Debian testing watch)
  • [2023-10-05] Accepted snappy-java 1.1.10.5-1 (source) into unstable (tony mancill)
  • [2021-01-30] snappy-java 1.1.8.3-1 MIGRATED to testing (Debian testing watch)
  • [2021-01-25] Accepted snappy-java 1.1.8.3-1 (source) into unstable (Emmanuel Bourg)
  • [2020-09-22] snappy-java 1.1.7.7-1 MIGRATED to testing (Debian testing watch)
  • [2020-09-16] Accepted snappy-java 1.1.7.7-1 (source) into unstable (Emmanuel Bourg)
  • [2020-06-21] snappy-java 1.1.7.5-1 MIGRATED to testing (Debian testing watch)
  • [2020-06-15] Accepted snappy-java 1.1.7.5-1 (source) into unstable (Emmanuel Bourg)
  • [2020-02-01] snappy-java 1.1.7.3-1 MIGRATED to testing (Debian testing watch)
  • [2020-01-26] Accepted snappy-java 1.1.7.3-1 (source) into unstable (Emmanuel Bourg)
  • [2018-10-10] snappy-java 1.1.7.2-1 MIGRATED to testing (Debian testing watch)
  • [2018-10-04] Accepted snappy-java 1.1.7.2-1 (source) into unstable (Emmanuel Bourg)
  • [2018-05-08] snappy-java 1.1.7.1+dfsg-1 MIGRATED to testing (Debian testing watch)
  • [2018-05-03] Accepted snappy-java 1.1.7.1+dfsg-1 (source) into unstable (Andreas Tille)
  • [2017-06-25] snappy-java 1.1.4-1 MIGRATED to testing (Debian testing watch)
  • [2017-06-24] Accepted snappy-java 1.1.2.6-1~bpo8+1 (source all amd64) into jessie-backports->backports-policy, jessie-backports (Andreas Tille)
  • [2017-06-20] Accepted snappy-java 1.1.4-1 (source) into unstable (Emmanuel Bourg)
  • [2016-07-14] snappy-java 1.1.2.6-1 MIGRATED to testing (Debian testing watch)
  • [2016-07-08] Accepted snappy-java 1.1.2.6-1 (source all amd64) into unstable (Emmanuel Bourg)
  • [2016-04-12] Accepted snappy-java 1.1.2.4-3~bpo8+1 (source all amd64) into jessie-backports, jessie-backports (Andreas Tille)
  • [2016-04-11] snappy-java 1.1.2.4-3 MIGRATED to testing (Debian testing watch)
  • [2016-04-05] Accepted snappy-java 1.1.2.4-3 (source all amd64) into unstable (Emmanuel Bourg)
  • [2016-03-03] snappy-java 1.1.2.1-2 MIGRATED to testing (Debian testing watch)
  • [2016-02-25] Accepted snappy-java 1.1.2.1-2 (source all amd64) into unstable (Emmanuel Bourg)
  • [2016-01-29] Accepted snappy-java 1.1.2.1-1 (source all amd64) into unstable (Emmanuel Bourg)
  • 1
  • 2
bugs [bug history graph]
  • all: 1
  • RC: 0
  • I&N: 0
  • M&W: 1
  • F&P: 0
  • patch: 0
links
  • homepage
  • lintian
  • buildd: logs, reproducibility, cross
  • popcon
  • browse source code
  • edit tags
  • other distros
  • security tracker
  • debian patches
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 1.1.10.7-1

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing