Sign me up Login

Details about package popt

Name:	popt (PTS)
Uploader:	Håvard F. Aasen <havard.f.aasen@pfft.no> (Debian QA page)
Description:	libpopt0 - lib for parsing cmdline parameters libpopt-dev - lib for parsing cmdline parameters - development files libpopt0-udeb - lib for parsing cmdline parameters

Package uploads

Upload #1

Information

Version:	1.19+dfsg-3
Uploaded:	2026-11-07 06:07
Source package:	popt_1.19+dfsg-3.dsc
Distribution:	unstable
Section:	devel
Priority:
Homepage:	https://github.com/rpm-software-management/popt
Vcs-Git:	https://salsa.debian.org/debian/popt.git
Vcs-Browser:	https://salsa.debian.org/debian/popt
Closes bugs:	#1146722

Changelog

 popt (1.19+dfsg-3) unstable; urgency=medium
 .
   * Add patches from upstream to fix multiple CVE's, (Closes: #1146722)
      - CVE-2026-18739: Off-by-one in poptStuffArgs()
      - CVE-2026-18743: Buffer overflow(s) in poptConfigFileToString()
      - CVE-2026-18839: Buffer overflows in popt --help printing
   * Remove RRR, value is now default.
   * Remove Priority field, value is now default.
   * Update Standards-Version to 4.7.4.
   * Bump debhelper to 14.
     Removes now unnecessary 'depends' fields.
   * Add reference to local file for GPL2 license.
     This fixes a lintian issue with 'wrong fsf address'.
   * Update copyright year on myself.

QA information

–
Package uses debhelper-compat

Debhelper compatibility level 14

–

Package is the latest upstream version

Local:	1.19+dfsg
Upstream:	1.19
Url:	https://ftp.osuosl.org/pub/rpm/popt/releases/popt-1.x/popt-1.19.tar.gz

–
Package is not native

Format: 3.0 (quilt)
–
"Maintainer" email is the same as the uploader
–
Package has lintian warnings
popt source
- W debhelper-but-no-misc-depends
  - libpopt-dev
  - libpopt0
- W recommended-field
  - (in section for source) Priority [debian/control:1]
- P package-uses-experimental-debhelper-compat-version
  - 14
- X debian-watch-does-not-check-openpgp-signature
  - [debian/watch]
- X very-long-line-length-in-source-file
  - 1000 > 512 [tests/test3-data/02.input:2]
  - 1001 > 512 [debian/patches/Fix-CVE-2026-18743-buffer-overflow-s-in-poptConfigFileToS.patch:82]
  - 1304 > 512 [tests/test3-data/03.answer:1]
  - 978 > 512 [tests/test3-data/05.answer:1]
–
Package closes bug
- src:popt:
  - #1146722 (Important): popt: CVE-2026-18739 CVE-2026-18839
–
Package is already in Debian
- The package uploader is currently maintaining popt in Debian
- Last upload was on the 2024-10-29
–
d/copyright is in DEP5 format

Upstream Contact: rpm-maint@lists.rpm.org

Licenses: public-domain, expat

Comments

No comments

Upstream Contact:	rpm-maint@lists.rpm.org
Licenses:	public-domain, expat