libical3 - Debian Package Tracker

general

source: libical3 (main)
version: 3.0.20-3
maintainer: Nicolas Mora (DMD)
arch: all any
std-ver: 4.7.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 3.0.9-2
oldstable: 3.0.16-1
stable: 3.0.20-1
testing: 3.0.20-3
unstable: 3.0.20-3

versioned links

3.0.9-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.0.16-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.0.20-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.0.20-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

gir1.2-ical-3.0
libical-dev
libical-doc
libical3t64

action needed

A new upstream version is available: 20221025-f9ed452c1d high

A new upstream version 20221025-f9ed452c1d is available, you should consider packaging it.

Created: 2026-10-22 Last update: 2026-10-24 20:00

Failed to analyze the VCS repository. Please troubleshoot and fix the issue. high

vcswatch reports that there is an error with this package's VCS, or the debian/changelog file inside it. Please check the error shown below and try to fix it. You might have to update the VCS URL in the debian/control file to point to the correct repository.

changelog package libical4 does not match source libical3

Created: 2026-09-18 Last update: 2026-10-19 00:00

1 security issue in trixie high

There is 1 open security issue in trixie.

1 important issue:

CVE-2026-111269: libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_string() in src/libical/icalvalue.c when decoding input ending in a backslash. Attackers can supply escaped iCalendar text with a trailing backslash, causing the loop to read past the terminator and crash the application or leak adjacent heap memory.

Created: 2026-10-17 Last update: 2026-10-17 11:48

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2026-111269: libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_string() in src/libical/icalvalue.c when decoding input ending in a backslash. Attackers can supply escaped iCalendar text with a trailing backslash, causing the loop to read past the terminator and crash the application or leak adjacent heap memory.

Created: 2026-10-17 Last update: 2026-10-17 11:48

1 security issue in forky high

There is 1 open security issue in forky.

1 important issue:

CVE-2026-111269: libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_string() in src/libical/icalvalue.c when decoding input ending in a backslash. Attackers can supply escaped iCalendar text with a trailing backslash, causing the loop to read past the terminator and crash the application or leak adjacent heap memory.

Created: 2026-10-17 Last update: 2026-10-17 11:48

1 security issue in bookworm high

There is 1 open security issue in bookworm.

1 important issue:

CVE-2026-111269: libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_string() in src/libical/icalvalue.c when decoding input ending in a backslash. Attackers can supply escaped iCalendar text with a trailing backslash, causing the loop to read past the terminator and crash the application or leak adjacent heap memory.

Created: 2026-10-17 Last update: 2026-10-17 11:48

Depends on packages which need a new maintainer normal

The packages that libical3 depends on which need a new maintainer are:

db5.3 (#1055356)
- Depends: libdb5.3t64
db-defaults (#1055344)
- Depends: libdb-dev
- Build-Depends: libdb-dev

Created: 2023-11-04 Last update: 2026-10-24 19:00

lintian reports 2 warnings normal

Lintian reports 2 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2026-08-01 Last update: 2026-08-01 05:49

debian/patches: 1 patch to forward upstream low

Among the 1 debian patch available in version 3.0.20-3 of the package, we noticed the following issues:

1 patch where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2026-08-01 Last update: 2026-08-01 11:32

news

[rss feed]

[2026-08-03] libical3 3.0.20-3 MIGRATED to testing (Debian testing watch)
[2026-07-31] Accepted libical3 3.0.20-3 (source) into unstable (Nicolas Mora)
[2025-10-30] libical3 3.0.20-2 MIGRATED to testing (Debian testing watch)
[2025-10-27] Accepted libical3 3.0.20-2 (source) into unstable (Nicolas Mora)
[2025-03-16] libical3 3.0.20-1 MIGRATED to testing (Debian testing watch)
[2025-03-13] Accepted libical3 3.0.20-1 (source) into unstable (Nicolas Mora)
[2025-02-07] libical3 3.0.19-4 MIGRATED to testing (Debian testing watch)
[2025-02-01] Accepted libical3 3.0.19-4 (source) into unstable (Nicolas Mora)
[2025-01-13] libical3 3.0.19-3 MIGRATED to testing (Debian testing watch)
[2025-01-10] Accepted libical3 3.0.19-3 (source) into unstable (Nicolas Mora)
[2025-01-06] Accepted libical3 3.0.19-2 (source) into experimental (Nicolas Mora)
[2024-12-28] libical3 3.0.19-1 MIGRATED to testing (Debian testing watch)
[2024-12-25] Accepted libical3 3.0.19-1 (source) into unstable (Nicolas Mora)
[2024-05-10] libical3 3.0.18-1 MIGRATED to testing (Debian testing watch)
[2024-05-06] Accepted libical3 3.0.18-1 (source) into unstable (Nicolas Mora)
[2024-05-02] libical3 3.0.17-1.1 MIGRATED to testing (Debian testing watch)
[2024-02-28] Accepted libical3 3.0.17-1.1 (source) into unstable (Benjamin Drung)
[2024-02-01] Accepted libical3 3.0.17-1.1~exp1 (source) into experimental (Steve Langasek)
[2023-10-23] libical3 3.0.17-1 MIGRATED to testing (Debian testing watch)
[2023-10-19] Accepted libical3 3.0.17-1 (source) into unstable (Nicolas Mora)
[2022-10-21] libical3 3.0.16-1 MIGRATED to testing (Debian testing watch)
[2022-10-18] Accepted libical3 3.0.16-1 (source) into unstable (Nicolas Mora)
[2022-10-13] libical3 3.0.15-2 MIGRATED to testing (Debian testing watch)
[2022-10-10] Accepted libical3 3.0.15-2 (source) into unstable (Nicolas Mora)
[2022-10-09] Accepted libical3 3.0.15-1 (source) into unstable (Nicolas Mora)
[2022-02-08] libical3 3.0.14-1 MIGRATED to testing (Debian testing watch)
[2022-02-05] Accepted libical3 3.0.14-1 (source) into unstable (Nicolas Mora)
[2022-01-21] libical3 3.0.13-1 MIGRATED to testing (Debian testing watch)
[2022-01-18] Accepted libical3 3.0.13-1 (source) into unstable (Nicolas Mora)
[2021-12-17] libical3 3.0.12-1 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 2
RC: 0
I&N: 2
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (0, 2)
buildd: logs, reproducibility, cross
popcon
browse source code
other distros
security tracker
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 3.0.20-3
1 bug