Register | Log in

needrestart

check which daemons need to be restarted after library upgrades

Choose email to subscribe with

general

source: needrestart (main)
version: 3.7-3.1
maintainer: Patrick Matthäi (DMD)
arch: all
std-ver: 4.7.0
VCS: unknown

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 3.4-5+deb10u1
o-o-sec: 3.4-5+deb10u2
oldstable: 3.5-4+deb11u3
old-sec: 3.5-4+deb11u4
stable: 3.6-4+deb12u1
stable-sec: 3.6-4+deb12u2
testing: 3.7-3
unstable: 3.7-3.1

versioned links

3.4-5+deb10u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.4-5+deb10u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.5-4+deb11u3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.5-4+deb11u4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.6-4+deb12u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.6-4+deb12u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.7-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.7-3.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

needrestart (45 bugs: 0, 29, 16, 0)

action needed

A new upstream version is available: 3.8 high

A new upstream version 3.8 is available, you should consider packaging it.

Created: 2024-11-19 Last update: 2024-11-21 07:31

debian/patches: 1 patch with invalid metadata, 10 patches to forward upstream high

Among the 11 debian patches available in version 3.7-3.1 of the package, we noticed the following issues:

1 patch with invalid metadata that ought to be fixed.
10 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-02-26 Last update: 2024-11-20 06:02

4 security issues in trixie high

There are 4 open security issues in trixie.

4 important issues:

CVE-2024-11003: Qualys discovered that needrestart, before version 3.8, passes unsanitized data to a library (Modules::ScanDeps) which expects safe input. This could allow a local attacker to execute arbitrary shell commands. Please see the related CVE-2024-10224 in Modules::ScanDeps.
CVE-2024-48990: Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Python interpreter with an attacker-controlled PYTHONPATH environment variable.
CVE-2024-48991: Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by winning a race condition and tricking needrestart into running their own, fake Python interpreter (instead of the system's real Python interpreter).
CVE-2024-48992: Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Ruby interpreter with an attacker-controlled RUBYLIB environment variable.

Created: 2024-11-19 Last update: 2024-11-20 03:33

testing migrations

excuses:
- Migration status for needrestart (3.7-3 to 3.7-3.1): Waiting for test results or another package, or too young (no action required now - check later)
- Issues preventing migration:
- ∙ ∙ Too young, only 1 of 2 days old
- Additional info:
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/n/needrestart.html
- ∙ ∙ autopkgtest for needrestart/3.7-3.1: amd64: Pass, arm64: Pass, armel: Pass, armhf: Pass, i386: Pass, ppc64el: Pass, riscv64: Pass, s390x: Pass
- ∙ ∙ Reproducible on amd64 - info ♻
- ∙ ∙ Reproducible on arm64 - info ♻
- ∙ ∙ Waiting for reproducibility test results on armhf - info ♻
- ∙ ∙ Reproducible on i386 - info ♻
- ∙ ∙ Required age reduced by 3 days because of autopkgtest
- ∙ ∙ Required age is not allowed to drop below 2 days
- Not considered

news

[2024-11-20] Accepted needrestart 3.4-5+deb10u2 (source) into oldoldstable (Lucas Kanashiro)
[2024-11-19] Accepted needrestart 3.6-4+deb12u2 (source) into stable-security (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
[2024-11-19] Accepted needrestart 3.5-4+deb11u4 (source) into oldstable-security (Salvatore Bonaccorso)
[2024-11-19] Accepted needrestart 3.7-3.1 (source) into unstable (Salvatore Bonaccorso)
[2024-10-03] needrestart 3.7-3 MIGRATED to testing (Debian testing watch)
[2024-10-01] Accepted needrestart 3.7-3 (source) into unstable (Patrick Matthäi)
[2024-08-25] needrestart 3.7-2 MIGRATED to testing (Debian testing watch)
[2024-08-22] Accepted needrestart 3.7-2 (source) into unstable (Patrick Matthäi)
[2024-08-15] needrestart 3.7-1 MIGRATED to testing (Debian testing watch)
[2024-08-13] Accepted needrestart 3.7-1 (source) into unstable (Patrick Matthäi)
[2024-04-05] needrestart 3.6-8 MIGRATED to testing (Debian testing watch)
[2024-04-03] Accepted needrestart 3.6-8 (source) into unstable (Patrick Matthäi)
[2024-01-14] Accepted needrestart 3.6-4+deb12u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Antoine Beaupré)
[2023-12-16] needrestart 3.6-7 MIGRATED to testing (Debian testing watch)
[2023-12-12] Accepted needrestart 3.6-7 (source) into unstable (Patrick Matthäi)
[2023-11-22] needrestart 3.6-6 MIGRATED to testing (Debian testing watch)
[2023-11-20] Accepted needrestart 3.6-6 (source) into unstable (Patrick Matthäi)
[2023-07-06] needrestart 3.6-5 MIGRATED to testing (Debian testing watch)
[2023-07-06] needrestart 3.6-5 MIGRATED to testing (Debian testing watch)
[2023-07-02] Accepted needrestart 3.6-5 (source) into unstable (Patrick Matthäi)
[2023-06-03] needrestart 3.6-4 MIGRATED to testing (Debian testing watch)
[2023-05-31] Accepted needrestart 3.6-4 (source) into unstable (Patrick Matthäi)
[2023-02-12] Accepted needrestart 3.5-4+deb11u3 (source) into proposed-updates (Debian FTP Masters) (signed by: Patrick Matthäi)
[2023-01-17] needrestart 3.6-3 MIGRATED to testing (Debian testing watch)
[2023-01-12] Accepted needrestart 3.6-3 (source) into unstable (Patrick Matthäi)
[2022-09-17] needrestart 3.6-2 MIGRATED to testing (Debian testing watch)
[2022-09-14] Accepted needrestart 3.6-2 (source) into unstable (Patrick Matthäi)
[2022-05-29] Accepted needrestart 3.5-4+deb11u2 (source) into proposed-updates->stable-new, proposed-updates (Debian FTP Masters) (signed by: Patrick Matthäi)
[2022-05-26] Accepted needrestart 3.4-5+deb10u1 (source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Debian FTP Masters) (signed by: Patrick Matthäi)
[2022-05-26] Accepted needrestart 3.5-4+deb11u1 (source) into proposed-updates->stable-new, proposed-updates (Debian FTP Masters) (signed by: Patrick Matthäi)

1
2

bugs [bug history graph]

all: 44 45
RC: 0
I&N: 28 29
M&W: 16
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs, reproducibility
popcon
browse source code
edit tags
other distros
security tracker
screenshots
l10n (-, 100)
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 3.6-8ubuntu4
14 bugs (2 patches)
patches for 3.6-8ubuntu6

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing