Debian Package Tracker
Register | Log in
Subscribe

hoteldruid

web-based property management system for hotels or B&Bs

Choose email to subscribe with

general
  • source: hoteldruid (main)
  • version: 3.0.4-1
  • maintainer: Marco Maria Francesco De Santis (DMD)
  • arch: all
  • std-ver: 4.6.0
  • VCS: unknown
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • o-o-stable: 2.2.0-1
  • oldstable: 2.3.2-1
  • stable: 3.0.1-1
  • testing: 3.0.4-1
  • unstable: 3.0.4-1
versioned links
  • 2.2.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2.3.2-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 3.0.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 3.0.4-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • hoteldruid
action needed
A new upstream version is available: 3.0.5 high
A new upstream version 3.0.5 is available, you should consider packaging it.
Created: 2023-03-20 Last update: 2023-03-31 04:33
AppStream hints: 1 error and 2 warnings high
AppStream found metadata issues for packages:
  • hoteldruid: 1 error and 2 warnings
You should get rid of them to provide more metadata about this software.
Created: 2021-11-12 Last update: 2022-01-21 06:05
RFS: A sponsor is needed to update this package. normal
A Debian contributor is looking for a sponsor to upload a package update. It might be the regular maintainer who does not have any upload right yet, or it might be someone who just wants to help for a bugfix or a new upstream version. In any case, if you have upload rights and care about this package and Debian in general, you should look into sponsoring this update. Please see bug number #1033063 for more information.
Created: 2023-03-16 Last update: 2023-03-16 22:36
lintian reports 5 warnings normal
Lintian reports 5 warnings about this package. You should make the package lintian clean getting rid of them.
Created: 2022-01-01 Last update: 2022-07-30 12:14
7 low-priority security issues in bullseye low

There are 7 open security issues in bullseye.

7 issues left for the package maintainer to handle:
  • CVE-2021-37832: (needs triaging) A SQL injection vulnerability exists in version 3.0.2 of Hotel Druid when SQLite is being used as the application database. A malicious attacker can issue SQL commands to the SQLite database through the vulnerable idappartamenti parameter.
  • CVE-2021-37833: (needs triaging) A reflected cross-site scripting (XSS) vulnerability exists in multiple pages in version 3.0.2 of the Hotel Druid application that allows for arbitrary execution of JavaScript commands.
  • CVE-2021-38559: (needs triaging) DigitalDruid HotelDruid 3.0.2 has an XSS vulnerability in prenota.php affecting the fineperiodo1 parameter.
  • CVE-2021-42948: (needs triaging) HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's.
  • CVE-2021-42949: (needs triaging) The component controlla_login function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing attackers to bypass authentication via bruteforce attacks.
  • CVE-2022-22909: (needs triaging) HotelDruid v3.0.3 was discovered to contain a remote code execution (RCE) vulnerability which is exploited via an attacker inserting a crafted payload into the name field under the Create New Room module.
  • CVE-2022-26564: (needs triaging) HotelDruid Hotel Management Software v3.0.3 contains a cross-site scripting (XSS) vulnerability via the prezzoperiodo4 parameter in creaprezzi.php.

You can find information about how to handle these issues in the security team's documentation.

Created: 2022-07-04 Last update: 2023-03-27 11:06
Standards version of the package is outdated. wishlist
The package should be updated to follow the last version of Debian Policy (Standards-Version 4.6.2 instead of 4.6.0).
Created: 2022-05-11 Last update: 2022-12-17 19:17
news
[rss feed]
  • [2022-04-29] hoteldruid 3.0.4-1 MIGRATED to testing (Debian testing watch)
  • [2022-04-22] Accepted hoteldruid 3.0.4-1 (source) into unstable (Marco Maria Francesco De Santis) (signed by: bage@debian.org)
  • [2021-11-19] hoteldruid 3.0.3-1 MIGRATED to testing (Debian testing watch)
  • [2021-11-11] Accepted hoteldruid 3.0.3-1 (source) into unstable (Marco Maria Francesco De Santis) (signed by: bage@debian.org)
  • [2020-02-24] hoteldruid 3.0.1-1 MIGRATED to testing (Debian testing watch)
  • [2020-02-13] Accepted hoteldruid 3.0.1-1 (source) into unstable (Marco Maria Francesco De Santis) (signed by: Adam Borowski)
  • [2019-11-21] hoteldruid 3.0.0-1 MIGRATED to testing (Debian testing watch)
  • [2019-11-10] Accepted hoteldruid 3.0.0-1 (source) into unstable (Marco Maria Francesco De Santis) (signed by: Adam Borowski)
  • [2019-03-10] hoteldruid 2.3.2-1 MIGRATED to testing (Debian testing watch)
  • [2019-02-27] Accepted hoteldruid 2.3.2-1 (source) into unstable (Marco Maria Francesco De Santis) (signed by: Adam Borowski)
  • [2019-01-10] hoteldruid 2.3.0-2 MIGRATED to testing (Debian testing watch)
  • [2019-01-07] Accepted hoteldruid 2.3.0-2 (source) into unstable (Marco Maria Francesco De Santis) (signed by: Adam Borowski)
  • [2018-11-21] hoteldruid 2.3.0-1 MIGRATED to testing (Debian testing watch)
  • [2018-11-10] Accepted hoteldruid 2.3.0-1 (source all) into unstable (Marco Maria Francesco De Santis) (signed by: Herbert Parentes Fortes Neto)
  • [2018-10-19] hoteldruid 2.2.4-1 MIGRATED to testing (Debian testing watch)
  • [2018-10-08] Accepted hoteldruid 2.2.4-1 (source) into unstable (Marco Maria Francesco De Santis) (signed by: Adam Borowski)
  • [2018-06-15] hoteldruid 2.2.3-1 MIGRATED to testing (Debian testing watch)
  • [2018-06-04] Accepted hoteldruid 2.2.3-1 (source) into unstable (Marco Maria Francesco De Santis) (signed by: Adam Borowski)
  • [2018-03-11] hoteldruid 2.2.2-1 MIGRATED to testing (Debian testing watch)
  • [2018-03-01] Accepted hoteldruid 2.2.2-1 (source) into unstable (Marco Maria Francesco De Santis) (signed by: Mattia Rizzolo)
  • [2017-08-09] hoteldruid 2.2.1-1 MIGRATED to testing (Debian testing watch)
  • [2017-07-29] Accepted hoteldruid 2.2.1-1 (source) into unstable (Marco Maria Francesco De Santis) (signed by: Adam Borowski)
  • [2017-01-03] hoteldruid 2.2.0-1 MIGRATED to testing (Debian testing watch)
  • [2016-12-23] Accepted hoteldruid 2.2.0-1 (source) into unstable (Marco Maria Francesco De Santis) (signed by: Mattia Rizzolo)
  • [2016-05-20] hoteldruid 2.1.4-2 MIGRATED to testing (Debian testing watch)
  • [2016-05-09] Accepted hoteldruid 2.1.4-2 (source) into unstable (Marco Maria Francesco De Santis) (signed by: Mattia Rizzolo)
  • [2016-02-17] hoteldruid 2.1.4-1 MIGRATED to testing (Debian testing watch)
  • [2016-02-06] Accepted hoteldruid 2.1.4-1 (source) into unstable (Marco Maria Francesco De Santis) (signed by: Mattia Rizzolo)
  • [2015-12-29] hoteldruid 2.1.3-1 MIGRATED to testing (Debian testing watch)
  • [2015-12-18] Accepted hoteldruid 2.1.3-1 (source) into unstable (Marco Maria Francesco De Santis) (signed by: Mattia Rizzolo)
  • 1
  • 2
bugs [bug history graph]
  • all: 0
links
  • homepage
  • lintian (0, 5)
  • buildd: logs, reproducibility
  • popcon
  • browse source code
  • edit tags
  • other distros
  • security tracker
  • screenshots
  • l10n (99, -)
  • debian patches
  • debci
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 3.0.4-1

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing