tftp-hpa - Debian Package Tracker

general

source: tftp-hpa (main)
version: 7.2-3
maintainer: Chris Hofstaedtler (DMD)
arch: any
std-ver: 3.9.6.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 5.2+20150808-1.2
oldstable: 5.2+20150808-1.4
stable: 5.2+20240610-3
testing: 5.4-2
unstable: 7.2-3

versioned links

5.2+20150808-1.2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.2+20150808-1.4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.2+20240610-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.4-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
7.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
7.2-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

tftp-hpa
tftpd-hpa (1 bugs: 0, 0, 1, 0)

action needed

Standards version of the package is outdated. high

The package is severely out of date with respect to the Debian Policy. The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 3.9.6.1).

Created: 2018-04-16 Last update: 2026-09-28 01:31

The package has not entered testing even though the delay is over normal

The package has not entered testing even though the 5-day delay is over. Check why.

Created: 2026-10-03 Last update: 2026-10-06 10:49

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2026-09-02 Last update: 2026-10-06 10:47

3 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 01146bd51110856acca8d48c242f965a19c9dc90
Author: Chris Hofstaedtler <zeha@debian.org>
Date:   Sun Sep 27 19:25:39 2026 +0200

    Update changelog for 7.2-3 release

commit fd7060943e54a7a22f28e57e703cdeb061f779d2
Author: Luca Boccassi <luca.boccassi@gmail.com>
Date:   Sun Sep 27 15:51:37 2026 +0200

    Add build-dep on dh-sequence-installsysusers
    
    Needed until dh-compat 14
    
    Follow-up for d6272423d689a2fc3a43076b2b85c8fd1ae02705

commit 827a9ecead2b073c6ed4a2f3e18ccc4e203c5438
Author: Luca Boccassi <luca.boccassi@gmail.com>
Date:   Sun Sep 27 15:51:05 2026 +0200

    Drop unused dependency on adduser
    
    Follow-up for d6272423d689a2fc3a43076b2b85c8fd1ae02705

Created: 2026-07-15 Last update: 2026-10-04 07:32

1 open merge request in Salsa normal

There is 1 open merge request for this package on Salsa. You should consider reviewing and/or merging these merge requests.

Created: 2026-10-04 Last update: 2026-10-04 07:32

1 low-priority security issue in trixie low

There is 1 open security issue in trixie.

1 issue left for the package maintainer to handle:

CVE-2026-85234: (needs triaging) A flaw was found in tftp-hpa. When the `in.tftpd` remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the `genmatchstring()` function. This leads to out-of-bounds read/write operations. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted request, causing the daemon to crash and resulting in a denial of service.

You can find information about how to handle this issue in the security team's documentation.

Created: 2026-09-16 Last update: 2026-10-04 01:32

Issues found with some translations low

Automatic checks made by the Debian l10n team found some issues with the translations contained in this package. You should check the l10n status report for more information.

Issues can be things such as missing translations, problematic translated strings, outdated PO files, unknown languages, etc.

Created: 2026-09-27 Last update: 2026-09-27 14:30

testing migrations

excuses:
- Migration status for tftp-hpa (5.4-2 to 7.2-3): BLOCKED: Maybe temporary, maybe blocked but Britney is missing information (check below)
- Issues preventing migration:
- ∙ ∙ Missing build on armhf
- ∙ ∙ Missing build on i386
- ∙ ∙ Missing build on riscv64
- ∙ ∙ Autopkgtest deferred on armhf: missing arch:armhf build
- ∙ ∙ Autopkgtest deferred on i386: missing arch:i386 build
- ∙ ∙ Autopkgtest deferred on riscv64: missing arch:riscv64 build
- ∙ ∙ Autopkgtest for debian-edu/2.13.7: amd64: Failed (not a regression) ♻ (reference ♻), arm64: Failed (not a regression) ♻ (reference ♻), ppc64el: Test triggered (failure will be ignored), s390x: Failed (not a regression) ♻ (reference ♻)
- ∙ ∙ Lintian check waiting for test results on armhf, i386, riscv64 - info
- ∙ ∙ Reproducibility check deferred on armhf: missing builds - info
- ∙ ∙ Reproducibility check deferred on i386: missing builds - info
- Additional info (not blocking):
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/t/tftp-hpa.html
- ∙ ∙ Reproduced on amd64 - info
- ∙ ∙ Reproduced on arm64 - info
- ∙ ∙ 8 days old (needed 5 days)
- Not considered

news

[rss feed]

[2026-09-27] Accepted tftp-hpa 7.2-3 (source) into unstable (Chris Hofstaedtler)
[2026-09-27] Accepted tftp-hpa 7.2-2 (source) into unstable (Chris Hofstaedtler)
[2026-09-27] Accepted tftp-hpa 7.2-1 (source) into unstable (Chris Hofstaedtler)
[2026-09-26] Accepted tftp-hpa 7.1-1 (source) into unstable (Chris Hofstaedtler)
[2026-08-08] tftp-hpa 5.4-2 MIGRATED to testing (Debian testing watch)
[2026-08-02] Accepted tftp-hpa 5.4-2 (source) into unstable (Chris Hofstaedtler) (signed by: Christian Hofstaedtler)
[2026-07-20] tftp-hpa 5.4-1 MIGRATED to testing (Debian testing watch)
[2026-07-14] Accepted tftp-hpa 5.4-1 (source) into unstable (Chris Hofstaedtler) (signed by: Christian Hofstaedtler)
[2026-01-14] tftp-hpa 5.3+20251209-2 MIGRATED to testing (Debian testing watch)
[2026-01-07] Accepted tftp-hpa 5.3+20251209-2 (source) into unstable (Chris Hofstaedtler) (signed by: Christian Hofstaedtler)
[2025-12-14] tftp-hpa 5.3+20251209-1 MIGRATED to testing (Debian testing watch)
[2025-12-09] Accepted tftp-hpa 5.3+20251209-1 (source) into unstable (Chris Hofstaedtler) (signed by: Christian Hofstaedtler)
[2025-11-28] tftp-hpa 5.3+20251116-1 MIGRATED to testing (Debian testing watch)
[2025-11-22] Accepted tftp-hpa 5.3+20251116-1 (source) into unstable (Chris Hofstaedtler) (signed by: Christian Hofstaedtler)
[2025-11-16] tftp-hpa 5.3+20251110-1 MIGRATED to testing (Debian testing watch)
[2025-11-11] Accepted tftp-hpa 5.3+20251110-1 (source) into unstable (Chris Hofstaedtler) (signed by: Christian Hofstaedtler)
[2025-01-28] tftp-hpa 5.2+20240610-3 MIGRATED to testing (Debian testing watch)
[2025-01-21] Accepted tftp-hpa 5.2+20240610-3 (source) into unstable (Chris Hofstaedtler) (signed by: Christian Hofstaedtler)
[2024-09-16] tftp-hpa 5.2+20240610-2 MIGRATED to testing (Debian testing watch)
[2024-09-10] Accepted tftp-hpa 5.2+20240610-2 (source) into unstable (Chris Hofstaedtler) (signed by: Christian Hofstaedtler)
[2024-07-20] tftp-hpa 5.2+20240610-1 MIGRATED to testing (Debian testing watch)
[2024-07-14] Accepted tftp-hpa 5.2+20240610-1 (source) into unstable (Chris Hofstaedtler) (signed by: Christian Hofstaedtler)
[2024-07-13] Accepted tftp-hpa 5.2+20150808-2 (source) into unstable (Chris Hofstaedtler) (signed by: Christian Hofstaedtler)
[2022-10-31] tftp-hpa 5.2+20150808-1.4 MIGRATED to testing (Debian testing watch)
[2022-10-25] Accepted tftp-hpa 5.2+20150808-1.4 (source) into unstable (Bastian Germann) (signed by: bage@debian.org)
[2022-09-21] tftp-hpa 5.2+20150808-1.3 MIGRATED to testing (Debian testing watch)
[2022-09-15] Accepted tftp-hpa 5.2+20150808-1.3 (source) into unstable (Bastian Germann) (signed by: bage@debian.org)
[2020-10-15] tftp-hpa 5.2+20150808-1.2 MIGRATED to testing (Debian testing watch)
[2020-10-05] Accepted tftp-hpa 5.2+20150808-1.2 (source) into unstable (Romain Porte) (signed by: Adam Borowski)
[2020-08-02] tftp-hpa 5.2+20150808-1.1 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 1
RC: 0
I&N: 0
M&W: 1
F&P: 0
patch: 1

links

homepage
lintian
buildd: logs, reproducibility, cross
popcon
browse source code
other distros
security tracker
l10n (93, -)

ubuntu

[Information about Ubuntu for Debian Developers]

version: 5.4-2
10 bugs (1 patch)