Debian Package Tracker

general

source: tcpdf (main)
version: 6.2.13+dfsg-1
maintainer: Debian QA Group [DMD]
arch: all
std-ver: 4.1.3
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-bpo: 6.0.048+dfsg-2~bpo70+1
oldstable: 6.0.093+dfsg-1+deb8u1
stable: 6.2.12+dfsg2-1
testing: 6.2.13+dfsg-1
unstable: 6.2.13+dfsg-1

versioned links

6.0.048+dfsg-2~bpo70+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
6.0.093+dfsg-1+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
6.2.12+dfsg2-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
6.2.13+dfsg-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

php-tcpdf

action needed

A new upstream version is available: 6.2.26 high

A new upstream version 6.2.26 is available, you should consider packaging it.

Created: 2018-04-12 Last update: 2019-02-17 12:06

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2018-17057: An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar:// wrapper.

Please fix it.

Created: 2018-09-15 Last update: 2018-11-28 07:06

1 security issue in buster high

There is 1 open security issue in buster.

1 important issue:

CVE-2018-17057: An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar:// wrapper.

Please fix it.

Created: 2018-09-15 Last update: 2018-11-28 07:06

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2018-10-01 Last update: 2019-02-17 16:00

Multiarch hinter reports 1 issue(s) normal

There are issues with the multiarch metadata for this package.

php-tcpdf could be marked Multi-Arch: foreign

Created: 2016-09-14 Last update: 2019-02-17 15:02

4 new commits since last upload, time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 6.2.13+dfsg-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit b18baacb9a753498b837a2305b7f526948176154
Author: Ondřej Nový <onovy@debian.org>
Date:   Mon Oct 1 10:24:57 2018 +0200

    d/watch: Use https protocol

commit fa78556994ec58316c32ca25ed9b320c1c9eee58
Author: Ondřej Nový <onovy@debian.org>
Date:   Mon Oct 1 10:24:56 2018 +0200

    d/rules: Remove trailing whitespaces

commit c98c79c61d5607a76a9b24ede6aff77792e11bf8
Author: Jelmer Vernooĳ <jelmer@jelmer.uk>
Date:   Sat Sep 29 01:01:57 2018 +0100

    Trim trailing whitespace.
    
    Fixes lintian: file-contains-trailing-whitespace
    See https://lintian.debian.org/tags/file-contains-trailing-whitespace.html for more details.

commit 8e5fe0f97bf667703126089e00fcb3143700992d
Author: Jelmer Vernooĳ <jelmer@jelmer.uk>
Date:   Sat Sep 29 01:01:55 2018 +0100

    Use secure copyright file specification URI.
    
    Fixes lintian: insecure-copyright-format-uri
    See https://lintian.debian.org/tags/insecure-copyright-format-uri.html for more details.

Created: 2018-09-29 Last update: 2019-02-17 02:28

O: This package has been orphaned and needs a maintainer. normal

This package has been orphaned. This means that it does not have a real maintainer at the moment. Please consider adopting this package if you are interested in it. Please see bug number #889731 for more information.

Created: 2018-02-06 Last update: 2018-02-06 20:08

1 ignored security issue in jessie low

There is 1 open security issue in jessie.

1 issue skipped by the security teams:

CVE-2018-17057: An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar:// wrapper.

Please fix it.

Created: 2018-09-15 Last update: 2018-11-28 07:06

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2018-17057: An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar:// wrapper.

Please fix it.

Created: 2018-09-15 Last update: 2018-11-28 07:06

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.3.0 instead of 4.1.3).

Created: 2018-04-16 Last update: 2018-12-23 17:14

news

[rss feed]

[2018-02-12] tcpdf 6.2.13+dfsg-1 MIGRATED to testing (Debian testing watch)
[2018-02-06] Accepted tcpdf 6.2.13+dfsg-1 (source) into unstable (Raphaël Hertzog)
[2017-06-30] Accepted tcpdf 6.0.093+dfsg-1+deb8u1 (source all) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Laurent Destailleur (eldy)) (signed by: Raphaël Hertzog)
[2016-03-05] tcpdf 6.2.12+dfsg2-1 MIGRATED to testing (Debian testing watch)
[2016-02-28] Accepted tcpdf 6.2.12+dfsg2-1 (source all) into unstable (Laurent Destailleur (eldy)) (signed by: Raphaël Hertzog)
[2014-09-13] tcpdf 6.0.093+dfsg-1 MIGRATED to testing (Britney)
[2014-09-07] Accepted tcpdf 6.0.093+dfsg-1 (source all) into unstable (Laurent Destailleur (eldy)) (signed by: Raphaël Hertzog)
[2014-08-29] Accepted tcpdf 6.0.091+dfsg-1 (source all) into unstable (Raphaël Hertzog)
[2014-01-10] tcpdf 6.0.048+dfsg-2 MIGRATED to testing (Debian testing watch)
[2014-01-04] Accepted tcpdf 6.0.048+dfsg-2 (source all) (Raphaël Hertzog)
[2013-12-12] tcpdf 6.0.048+dfsg-1 MIGRATED to testing (Debian testing watch)
[2013-12-02] Accepted tcpdf 6.0.048+dfsg-1 (source all) (Laurent Destailleur (eldy)) (signed by: Raphaël Hertzog)
[2013-08-17] tcpdf 6.0.021+dfsg-1 MIGRATED to testing (Debian testing watch)
[2013-08-06] Accepted tcpdf 6.0.021+dfsg-1 (source all) (Laurent Destailleur (eldy)) (signed by: Raphaël Hertzog)
[2013-05-05] tcpdf 6.0.010+dfsg-1 MIGRATED to testing (Debian testing watch)
[2013-04-20] Accepted tcpdf 6.0.010+dfsg-1 (source all) (Raphaël Hertzog)

bugs [bug history graph]

all: 4
RC: 2
I&N: 0
M&W: 2
F&P: 0
patch: 1

links

homepage
lintian
buildd: logs, clang, reproducibility
popcon
browse source code
edit tags
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 6.2.13+dfsg-1ubuntu1
2 bugs
patches for 6.2.13+dfsg-1ubuntu1