Debian Package Tracker
Register | Log in
Subscribe

snappy-java

Choose email to subscribe with

general
  • source: snappy-java (main)
  • version: 1.1.10.7-1
  • maintainer: Debian Java Maintainers (archive) (DMD)
  • uploaders: Andreas Tille [DMD] – Charles Plessy [DMD]
  • arch: all any
  • std-ver: 4.7.0
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • o-o-stable: 1.1.7.2-1
  • oldstable: 1.1.8.3-1
  • stable: 1.1.8.3-1
  • testing: 1.1.10.7-1
  • unstable: 1.1.10.7-1
versioned links
  • 1.1.7.2-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1.1.8.3-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1.1.10.7-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • libsnappy-java
  • libsnappy-jni
action needed
Multiarch hinter reports 1 issue(s) normal
There are issues with the multiarch metadata for this package.
  • libsnappy-jni could be marked Multi-Arch: same
Created: 2025-03-25 Last update: 2025-06-06 08:06
1 low-priority security issue in bookworm low

There is 1 open security issue in bookworm.

1 issue left for the package maintainer to handle:
  • CVE-2023-43642: (needs triaging) snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. The SnappyInputStream was found to be vulnerable to Denial of Service (DoS) attacks when decompressing data with a too large chunk size. Due to missing upper bound check on chunk length, an unrecoverable fatal error can occur. All versions of snappy-java including the latest released version 1.1.10.3 are vulnerable to this issue. A fix has been introduced in commit `9f8c3cf74` which will be included in the 1.1.10.4 release. Users are advised to upgrade. Users unable to upgrade should only accept compressed data from trusted sources.

You can find information about how to handle this issue in the security team's documentation.

Created: 2023-10-01 Last update: 2025-02-27 05:02
Standards version of the package is outdated. wishlist
The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.2 instead of 4.7.0).
Created: 2025-02-21 Last update: 2025-02-27 13:24
news
[rss feed]
  • [2024-11-23] snappy-java 1.1.10.7-1 MIGRATED to testing (Debian testing watch)
  • [2024-11-18] Accepted snappy-java 1.1.10.7-1 (source) into unstable (tony mancill)
  • [2024-04-13] snappy-java 1.1.10.5-2 MIGRATED to testing (Debian testing watch)
  • [2024-04-07] Accepted snappy-java 1.1.10.5-2 (source) into unstable (tony mancill)
  • [2023-10-10] snappy-java 1.1.10.5-1 MIGRATED to testing (Debian testing watch)
  • [2023-10-05] Accepted snappy-java 1.1.10.5-1 (source) into unstable (tony mancill)
  • [2021-01-30] snappy-java 1.1.8.3-1 MIGRATED to testing (Debian testing watch)
  • [2021-01-25] Accepted snappy-java 1.1.8.3-1 (source) into unstable (Emmanuel Bourg)
  • [2020-09-22] snappy-java 1.1.7.7-1 MIGRATED to testing (Debian testing watch)
  • [2020-09-16] Accepted snappy-java 1.1.7.7-1 (source) into unstable (Emmanuel Bourg)
  • [2020-06-21] snappy-java 1.1.7.5-1 MIGRATED to testing (Debian testing watch)
  • [2020-06-15] Accepted snappy-java 1.1.7.5-1 (source) into unstable (Emmanuel Bourg)
  • [2020-02-01] snappy-java 1.1.7.3-1 MIGRATED to testing (Debian testing watch)
  • [2020-01-26] Accepted snappy-java 1.1.7.3-1 (source) into unstable (Emmanuel Bourg)
  • [2018-10-10] snappy-java 1.1.7.2-1 MIGRATED to testing (Debian testing watch)
  • [2018-10-04] Accepted snappy-java 1.1.7.2-1 (source) into unstable (Emmanuel Bourg)
  • [2018-05-08] snappy-java 1.1.7.1+dfsg-1 MIGRATED to testing (Debian testing watch)
  • [2018-05-03] Accepted snappy-java 1.1.7.1+dfsg-1 (source) into unstable (Andreas Tille)
  • [2017-06-25] snappy-java 1.1.4-1 MIGRATED to testing (Debian testing watch)
  • [2017-06-24] Accepted snappy-java 1.1.2.6-1~bpo8+1 (source all amd64) into jessie-backports->backports-policy, jessie-backports (Andreas Tille)
  • [2017-06-20] Accepted snappy-java 1.1.4-1 (source) into unstable (Emmanuel Bourg)
  • [2016-07-14] snappy-java 1.1.2.6-1 MIGRATED to testing (Debian testing watch)
  • [2016-07-08] Accepted snappy-java 1.1.2.6-1 (source all amd64) into unstable (Emmanuel Bourg)
  • [2016-04-12] Accepted snappy-java 1.1.2.4-3~bpo8+1 (source all amd64) into jessie-backports, jessie-backports (Andreas Tille)
  • [2016-04-11] snappy-java 1.1.2.4-3 MIGRATED to testing (Debian testing watch)
  • [2016-04-05] Accepted snappy-java 1.1.2.4-3 (source all amd64) into unstable (Emmanuel Bourg)
  • [2016-03-03] snappy-java 1.1.2.1-2 MIGRATED to testing (Debian testing watch)
  • [2016-02-25] Accepted snappy-java 1.1.2.1-2 (source all amd64) into unstable (Emmanuel Bourg)
  • [2016-01-29] Accepted snappy-java 1.1.2.1-1 (source all amd64) into unstable (Emmanuel Bourg)
  • [2015-10-11] snappy-java 1.1.2-1 MIGRATED to testing (Britney)
  • 1
  • 2
bugs [bug history graph]
  • all: 1
  • RC: 0
  • I&N: 0
  • M&W: 1
  • F&P: 0
  • patch: 0
links
  • homepage
  • lintian
  • buildd: logs, reproducibility, cross
  • popcon
  • browse source code
  • edit tags
  • other distros
  • security tracker
  • debian patches
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 1.1.10.7-1

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing