python-icalendar - Debian Package Tracker

general

source: python-icalendar (main)
version: 7.3.0-1
maintainer: Debian Python Team (DMD)
uploaders: Jonas Smedegaard [DMD] – Christoph Egger [DMD] – Jelmer Vernooĳ [DMD] – Félix Sipma [DMD]
arch: all
std-ver: 4.7.2
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 4.0.3-4
oldstable: 4.0.3-5
stable: 6.0.1-2
testing: 6.3.1-2
unstable: 7.3.0-1

versioned links

4.0.3-4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.0.3-5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
6.0.1-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
6.3.1-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
7.3.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

python-icalendar-doc
python3-icalendar

action needed

Marked for autoremoval on 03 November due to python-anyio: #1148561 high

Version 6.3.1-2 of python-icalendar is marked for autoremoval from testing on Tue 03 Nov 2026. It depends (transitively) on python-anyio, affected by #1148561. You should try to prevent the removal by fixing these RC bugs.

Created: 2026-09-22 Last update: 2026-10-02 14:00

1 security issue in forky high

There is 1 open security issue in forky.

1 important issue:

CVE-2026-77399: icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 6.1.0 until 7.2.2, vInt.from_ical accepts an attacker-controlled VALARM REPEAT value and applications that request alarm times can eagerly expand it without an application-level limit. Alarms.times and Alarms.active reach the unbounded expansion in versions starting with 6.1.0, while Alarm.triggers adds a second affected path starting with 7.0.0. Parsing alone does not trigger the issue, but accessing these properties can consume excessive CPU time and heap memory and terminate or stall a service. This issue is fixed in version 7.2.2.

Created: 2026-09-24 Last update: 2026-09-30 18:00

lintian reports 5 warnings normal

Lintian reports 5 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2026-09-30 Last update: 2026-09-30 21:00

4 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 02ff09adfc45d4185a3c0df1c017c1f371d06c3a
Author: Alexandre Detiste <alexandre.detiste@gmail.com>
Date:   Wed Sep 30 12:08:43 2026 +0100

    Set upstream metadata fields: Documentation, Funding, Security-Contact.
    
    Changes-By: lintian-brush

commit 2380d10cbadc4f529706cca0517604d98a5ce105
Author: Alexandre Detiste <alexandre.detiste@gmail.com>
Date:   Wed Sep 30 12:08:41 2026 +0100

    Update lintian override info format in d/source/lintian-overrides on line 2-3.
    
    Changes-By: lintian-brush
    Fixes: lintian: source: mismatched-override missing-license-paragraph-in-dep5-copyright gpl-3\+ * [debian/source/lintian-overrides:2]
    Fixes: lintian: source: mismatched-override missing-license-text-in-dep5-copyright GPL-3\+ * [debian/source/lintian-overrides:3]
    See-also: https://lintian.debian.org/tags/mismatched-override.html

commit 125ccda3134339cdb35146e8239cbc76472332ff
Author: Alexandre Detiste <alexandre.detiste@gmail.com>
Date:   Wed Sep 30 12:08:41 2026 +0100

    Update standards version to 4.7.4, no changes needed.
    
    Upgrade checklist verified:
     4.7.3 → 4.7.4:
      * Package is not in non-free-firmware
    
    Changes-By: lintian-brush
    Fixes: lintian: source: out-of-date-standards-version 4.7.2 (released 2025-02-27) (current is 4.7.4.1)
    See-also: https://lintian.debian.org/tags/out-of-date-standards-version.html

commit 74cefd35fd0da4a3fb110fea03275d569f20870c
Author: Alexandre Detiste <alexandre.detiste@gmail.com>
Date:   Wed Sep 30 12:08:41 2026 +0100

    Remove redundant Priority: optional from source stanza.
    
    Changes-By: lintian-brush
    Fixes: lintian: source: redundant-priority-optional-field
    See-also: https://lintian.debian.org/tags/redundant-priority-optional-field.html

Created: 2026-09-30 Last update: 2026-09-30 15:31

debian/patches: 1 patch to forward upstream low

Among the 4 debian patches available in version 7.3.0-1 of the package, we noticed the following issues:

1 patch where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2026-09-30 Last update: 2026-09-30 21:01

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.7.2).

Created: 2025-12-23 Last update: 2026-09-30 16:34

testing migrations

excuses:
- Migrates after: sphinx
- Migration status for python-icalendar (6.3.1-2 to 7.3.0-1): BLOCKED: Rejected/violates migration policy/introduces a regression
- Issues preventing migration:
- ∙ ∙ Autopkgtest for confy/0.9.1-2: amd64: No tests, superficial or marked flaky ♻, arm64: No tests, superficial or marked flaky ♻, armhf: No tests, superficial or marked flaky ♻, i386: No tests, superficial or marked flaky ♻, ppc64el: No tests, superficial or marked flaky ♻, riscv64: No tests, superficial or marked flaky ♻ (reference ♻), s390x: Test triggered
- ∙ ∙ Autopkgtest for khal/1:0.14.0+ds-1: amd64: Pass, arm64: Pass, armhf: Pass, i386: Pass, ppc64el: Pass, riscv64: Pass, s390x: Test triggered
- ∙ ∙ Autopkgtest for python-caldav/1.3.9-1.2: amd64: Regression ♻ (reference ♻), arm64: Regression ♻ (reference ♻), armhf: Regression ♻ (reference ♻), i386: Reference test triggered, but real test failed already ♻, ppc64el: Regression ♻ (reference ♻), riscv64: Regression ♻ (reference ♻), s390x: Test triggered
- ∙ ∙ Autopkgtest for python-django-ical/1.9.2-4: amd64: Pass, arm64: Pass, armhf: Pass, i386: Pass, ppc64el: Pass, riscv64: Pass, s390x: Test triggered
- ∙ ∙ Autopkgtest for python-icalendar/7.3.0-1: amd64: Pass, arm64: Pass, armhf: Pass, i386: Pass, ppc64el: Pass, riscv64: Pass, s390x: Test triggered
- ∙ ∙ Autopkgtest for python-recurring-ical-events/3.8.0+dfsg-1: amd64: Pass, arm64: Pass, armhf: Pass, i386: Pass, ppc64el: Pass, riscv64: Pass, s390x: Test triggered
- ∙ ∙ Autopkgtest for python-x-wr-timezone/2.0.1-1: amd64: Pass, arm64: Pass, armhf: Pass, i386: Pass, ppc64el: Pass, riscv64: Pass, s390x: Test triggered
- ∙ ∙ Autopkgtest for xandikos/0.4.5-1: amd64: Pass, arm64: Pass, armhf: Pass, i386: Pass, ppc64el: Pass, riscv64: Pass, s390x: Test triggered
- ∙ ∙ Too young, only 2 of 5 days old
- ∙ ∙ Built-Using: python-icalendar sphinx (not considered)
- Additional info (not blocking):
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/p/python-icalendar.html
- ∙ ∙ Reproduced on amd64 - info
- ∙ ∙ Reproduced on arm64 - info
- ∙ ∙ Reproduced on armhf - info
- ∙ ∙ Reproduced on i386 - info
- Not considered

news

[rss feed]

[2026-09-30] Accepted python-icalendar 7.3.0-1 (source) into unstable (Alexandre Detiste)
[2025-12-11] python-icalendar 6.3.1-2 MIGRATED to testing (Debian testing watch)
[2025-12-07] Accepted python-icalendar 6.3.1-2 (source) into unstable (Alexandre Detiste)
[2025-08-30] python-icalendar 6.3.1-1 MIGRATED to testing (Debian testing watch)
[2025-08-26] Accepted python-icalendar 6.3.1-1 (source) into unstable (Colin Watson)
[2025-08-15] python-icalendar 6.0.1-3 MIGRATED to testing (Debian testing watch)
[2025-07-12] Accepted python-icalendar 6.0.1-3 (source) into unstable (Colin Watson)
[2025-05-15] python-icalendar 6.0.1-2 MIGRATED to testing (Debian testing watch)
[2025-05-04] Accepted python-icalendar 6.0.1-2 (source) into unstable (Ananthu C V)
[2024-11-05] python-icalendar 6.0.1-1 MIGRATED to testing (Debian testing watch)
[2024-10-30] Accepted python-icalendar 6.0.1-1 (source) into unstable (Colin Watson)
[2024-05-01] python-icalendar 5.0.12-1 MIGRATED to testing (Debian testing watch)
[2024-05-01] python-icalendar 5.0.12-1 MIGRATED to testing (Debian testing watch)
[2024-04-26] Accepted python-icalendar 5.0.12-1 (source) into unstable (Jochen Sprickerhof)
[2023-11-20] python-icalendar 5.0.11-1 MIGRATED to testing (Debian testing watch)
[2023-11-15] Accepted python-icalendar 5.0.11-1 (source) into unstable (Jochen Sprickerhof)
[2023-10-21] python-icalendar 5.0.10-2 MIGRATED to testing (Debian testing watch)
[2023-10-21] python-icalendar 5.0.10-2 MIGRATED to testing (Debian testing watch)
[2023-10-16] Accepted python-icalendar 5.0.10-2 (source) into unstable (Jochen Sprickerhof)
[2023-10-06] Accepted python-icalendar 5.0.10-1 (source) into unstable (Jochen Sprickerhof)
[2023-09-18] Accepted python-icalendar 5.0.8-1 (source) into unstable (Jonas Smedegaard)
[2023-07-29] python-icalendar 5.0.7-1 MIGRATED to testing (Debian testing watch)
[2023-07-21] Accepted python-icalendar 5.0.7-1 (source) into unstable (Jonas Smedegaard)
[2022-06-09] python-icalendar 4.0.3-5 MIGRATED to testing (Debian testing watch)
[2022-06-03] Accepted python-icalendar 4.0.3-5 (source) into unstable (Sandro Tosi)
[2020-07-09] Accepted python-icalendar 3.8-1+deb9u1 (source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Debian FTP Masters) (signed by: Adrian Bunk)
[2020-03-01] python-icalendar 4.0.3-4 MIGRATED to testing (Debian testing watch)
[2020-02-25] Accepted python-icalendar 4.0.3-4 (source) into unstable (Christoph Berg)
[2019-08-12] python-icalendar 4.0.3-3 MIGRATED to testing (Debian testing watch)
[2019-08-06] Accepted python-icalendar 4.0.3-3 (source) into unstable (Ondřej Nový)

bugs [bug history graph]

all: 0

links

homepage
lintian (0, 5)
buildd: logs, reproducibility
popcon
browse source code
other distros
security tracker
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 6.3.1-2