Standards version of the package is outdated.
high
The package is severely out of date with respect to the Debian Policy.The package should be updated to follow the last version of Debian Policy
(Standards-Version 4.1.4 instead of
3.9.8).
CVE-2013-1980: Buffer overflow in the get_dsmp function in loaders/masi_load.c in libxmp before 4.1.0 allows remote attackers to execute arbitrary code via a crafted MASI file.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/x/xmp.png){kind=link}