zvbi - Debian Package Tracker

general

source: zvbi (main)
version: 0.2.44-1
maintainer: Ileana Dumitrescu (DMD) (DM)
arch: all any
std-ver: 4.7.2
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.2.35-18
oldstable: 0.2.41-1
stable: 0.2.44-1
testing: 0.2.44-1
unstable: 0.2.44-1

versioned links

0.2.35-18: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.2.41-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.2.44-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libzvbi-common
libzvbi-dev
libzvbi-doc
libzvbi0t64
zvbi

action needed

Debci reports failed tests high

unstable: fail (log)
The tests ran in 0:01:02
Last run: 2025-12-18T00:57:32.000Z
Previous status: unknown

testing: fail (log)
The tests ran in 0:00:30
Last run: 2026-01-17T17:09:02.000Z
Previous status: unknown

stable: pass (log)
The tests ran in 0:00:28
Last run: 2025-11-09T09:37:16.000Z
Previous status: unknown

Created: 2025-12-11 Last update: 2026-01-19 21:00

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 0.2.44-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 9bf56468a93d861e9ddb6abc680e9b62dcc7dd5f
Author: Ileana Dumitrescu <ileanadumi95@protonmail.com>
Date:   Wed Jan 7 22:10:37 2026 +0200

    d/watch: Bump version from 4 to 5.

commit 16375c7137e7f5b3f953f2733f8849cc1558cea9
Author: Ileana Dumitrescu <ileanadumi95@protonmail.com>
Date:   Wed Jan 7 21:51:47 2026 +0200

    d/libzvbi0t64.lintian-overrides: Remove unused override.

commit 6451f6f85d2d67a2107695192e9c8d2fbe7a1b1b
Author: Ileana Dumitrescu <ileanadumi95@protonmail.com>
Date:   Wed Jan 7 21:50:52 2026 +0200

    d/control: Remove redundant fields, Rules-Requires-Root and Priority.

commit 75083f05041bfb456278f5e735242e163898bed2
Author: Ileana Dumitrescu <ileanadumi95@protonmail.com>
Date:   Wed Jan 7 21:45:48 2026 +0200

    d/copyright: Update debian copyright year to 2026.

commit c428cf81727dbc82749f3a371842f87bfeb061a5
Author: Ileana Dumitrescu <ileanadumi95@protonmail.com>
Date:   Wed Jan 7 21:45:00 2026 +0200

    d/control: Bump Standards-Version from 4.7.2 to 4.7.3.

commit 56224757553911c0835d3acf88ca909184f10c00
Author: Ileana Dumitrescu <ileanadumi95@protonmail.com>
Date:   Wed Jan 7 21:36:55 2026 +0200

    d/tests/control: Remove test for failure in chroots (Closes: #1115113).

commit 7619ee9795beec5a4c80f0a49550d19303918cd3
Author: Ileana Dumitrescu <ileanadumi95@protonmail.com>
Date:   Wed Jan 7 21:34:44 2026 +0200

    d/patches: Disable all of test-pdc for failures in chroots.

Created: 2026-01-07 Last update: 2026-01-14 09:03

5 low-priority security issues in bookworm low

There are 5 open security issues in bookworm.

5 issues left for the package maintainer to handle:

CVE-2025-2173: (needs triaging) A vulnerability was found in libzvbi up to 0.2.43. It has been classified as problematic. Affected is the function vbi_strndup_iconv_ucs2 of the file src/conv.c. The manipulation of the argument src_length leads to uninitialized pointer. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. The patch is identified as 8def647eea27f7fd7ad33ff79c2d6d3e39948dce. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.
CVE-2025-2174: (needs triaging) A vulnerability was found in libzvbi up to 0.2.43. It has been declared as problematic. Affected by this vulnerability is the function vbi_strndup_iconv_ucs2 of the file src/conv.c. The manipulation of the argument src_length leads to integer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. The patch is named ca1672134b3e2962cd392212c73f44f8f4cb489f. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.
CVE-2025-2175: (needs triaging) A vulnerability was found in libzvbi up to 0.2.43. It has been rated as problematic. Affected by this issue is the function _vbi_strndup_iconv. The manipulation leads to integer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.
CVE-2025-2176: (needs triaging) A vulnerability classified as critical has been found in libzvbi up to 0.2.43. This affects the function vbi_capture_sim_load_caption of the file src/io-sim.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. The identifier of the patch is ca1672134b3e2962cd392212c73f44f8f4cb489f. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.
CVE-2025-2177: (needs triaging) A vulnerability classified as critical was found in libzvbi up to 0.2.43. This vulnerability affects the function vbi_search_new of the file src/search.c. The manipulation of the argument pat_len leads to integer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. The patch is identified as ca1672134b3e2962cd392212c73f44f8f4cb489f. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.

You can find information about how to handle these issues in the security team's documentation.

Created: 2025-03-11 Last update: 2025-08-10 06:32

debian/patches: 1 patch to forward upstream low

Among the 1 debian patch available in version 0.2.44-1 of the package, we noticed the following issues:

1 patch where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2024-12-06 Last update: 2025-03-12 08:02

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.3 instead of 4.7.2).

Created: 2025-12-23 Last update: 2025-12-23 20:00

news

[rss feed]

[2025-03-14] zvbi 0.2.44-1 MIGRATED to testing (Debian testing watch)
[2025-03-11] Accepted zvbi 0.2.44-1 (source) into unstable (Ileana Dumitrescu)
[2024-12-12] zvbi 0.2.43-2 MIGRATED to testing (Debian testing watch)
[2024-12-09] Accepted zvbi 0.2.43-2 (source) into unstable (Ileana Dumitrescu)
[2024-12-08] zvbi 0.2.43-1 MIGRATED to testing (Debian testing watch)
[2024-12-05] Accepted zvbi 0.2.43-1 (source) into unstable (Ileana Dumitrescu)
[2024-04-26] zvbi 0.2.42-2 MIGRATED to testing (Debian testing watch)
[2024-03-13] Accepted zvbi 0.2.42-2 (source) into unstable (Ileana Dumitrescu)
[2024-02-29] Accepted zvbi 0.2.42-1.2 (source) into unstable (Steve Langasek)
[2024-02-06] Accepted zvbi 0.2.42-1.2~exp1 (source) into experimental (Steve Langasek)
[2024-01-22] zvbi 0.2.42-1.1 MIGRATED to testing (Debian testing watch)
[2024-01-19] Accepted zvbi 0.2.42-1.1 (source) into unstable (Chris Hofstaedtler) (signed by: Ileana Dumitrescu)
[2023-08-28] zvbi 0.2.42-1 MIGRATED to testing (Debian testing watch)
[2023-08-25] Accepted zvbi 0.2.42-1 (source) into unstable (Ileana Dumitrescu)
[2023-08-19] zvbi 0.2.41-2 MIGRATED to testing (Debian testing watch)
[2023-08-16] Accepted zvbi 0.2.41-2 (source) into unstable (Ileana Dumitrescu)
[2023-02-20] zvbi 0.2.41-1 MIGRATED to testing (Debian testing watch)
[2023-02-13] Accepted zvbi 0.2.41-1 (source) into unstable (Ileana Dumitrescu)
[2023-02-11] zvbi 0.2.40-1 MIGRATED to testing (Debian testing watch)
[2023-02-07] Accepted zvbi 0.2.40-1 (source) into unstable (Ileana Dumitrescu)
[2023-01-08] zvbi 0.2.39-2 MIGRATED to testing (Debian testing watch)
[2023-01-04] Accepted zvbi 0.2.39-2 (source) into unstable (Ileana Dumitrescu) (signed by: bage@debian.org)
[2022-12-25] zvbi 0.2.39-1 MIGRATED to testing (Debian testing watch)
[2022-12-21] Accepted zvbi 0.2.39-1 (source) into unstable (Ileana Dumitrescu) (signed by: Adam Borowski)
[2022-12-03] zvbi 0.2.38-1 MIGRATED to testing (Debian testing watch)
[2022-11-30] Accepted zvbi 0.2.38-1 (source) into unstable (Ileana Dumitrescu) (signed by: Adam Borowski)
[2022-10-18] zvbi 0.2.37-1 MIGRATED to testing (Debian testing watch)
[2022-10-16] Accepted zvbi 0.2.37-1 (source) into unstable (Ileana Dumitrescu) (signed by: Adam Borowski)
[2022-01-01] zvbi 0.2.35-19 MIGRATED to testing (Debian testing watch)
[2021-12-29] Accepted zvbi 0.2.35-19 (source) into unstable (Ileana Dumitrescu) (signed by: bage@debian.org)

bugs [bug history graph]

all: 1
RC: 1
I&N: 0
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
screenshots
l10n (-, 89)
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 0.2.44-1ubuntu1
3 bugs
patches for 0.2.44-1ubuntu1