libsass - Debian Package Tracker

general

source: libsass (main)
version: 3.6.5+20220909-3
maintainer: Debian Sass team (archive) (DMD)
uploaders: Jonas Smedegaard [DMD] – Anthony Fok [DMD]
arch: any
std-ver: 4.6.2
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 3.5.5-4
o-o-bpo: 3.6.4-3~bpo10+1
oldstable: 3.6.4+20201122-1
old-bpo: 3.6.5+20211226-1~bpo11+2
stable: 3.6.5+20220909-1
testing: 3.6.5+20220909-3
unstable: 3.6.5+20220909-3

versioned links

3.5.5-4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.6.4-3~bpo10+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.6.4+20201122-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.6.5+20211226-1~bpo11+2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.6.5+20220909-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.6.5+20220909-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libsass-dev
libsass1

action needed

The VCS repository is not up to date, push the missing commits. high

vcswatch reports that the current version of the package is not in its VCS.
Either you need to push your commits and/or your tags, or the information about the package's VCS are out of date. A common cause of the latter issue when using the Git VCS is not specifying the correct branch when the packaging is not in the default one (remote HEAD branch), which is usually "master" but can be modified in salsa.debian.org in the project's general settings with the "Default Branch" field). Alternatively the Vcs-Git field in debian/control can contain a "-b <branch-name>" suffix to indicate what branch is used for the Debian packaging.

Created: 2023-07-31 Last update: 2023-10-01 06:30

3 security issues in trixie high

There are 3 open security issues in trixie.

3 important issues:

CVE-2022-26592: Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function.
CVE-2022-43357: Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.
CVE-2022-43358: Stack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service (DoS).

Created: 2023-08-24 Last update: 2023-09-14 06:31

3 security issues in sid high

There are 3 open security issues in sid.

3 important issues:

CVE-2022-26592: Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function.
CVE-2022-43357: Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.
CVE-2022-43358: Stack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service (DoS).

Created: 2023-08-24 Last update: 2023-09-14 06:31

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2023-09-13 Last update: 2023-10-08 02:32

3 low-priority security issues in bullseye low

There are 3 open security issues in bullseye.

3 issues left for the package maintainer to handle:

CVE-2022-26592: (needs triaging) Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function.
CVE-2022-43357: (needs triaging) Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.
CVE-2022-43358: (needs triaging) Stack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service (DoS).

You can find information about how to handle these issues in the security team's documentation.

Created: 2023-08-24 Last update: 2023-09-14 06:31

3 low-priority security issues in bookworm low

There are 3 open security issues in bookworm.

3 issues left for the package maintainer to handle:

CVE-2022-26592: (needs triaging) Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function.
CVE-2022-43357: (needs triaging) Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.
CVE-2022-43358: (needs triaging) Stack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service (DoS).

You can find information about how to handle these issues in the security team's documentation.

Created: 2023-08-24 Last update: 2023-09-14 06:31

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2023-07-31 Last update: 2023-07-31 21:37

news

[rss feed]

[2023-08-03] libsass 3.6.5+20220909-3 MIGRATED to testing (Debian testing watch)
[2023-08-03] libsass 3.6.5+20220909-3 MIGRATED to testing (Debian testing watch)
[2023-07-31] Accepted libsass 3.6.5+20220909-3 (source) into unstable (Jonas Smedegaard)
[2023-07-30] Accepted libsass 3.6.5+20220909-2 (source) into unstable (Jonas Smedegaard)
[2022-12-15] libsass 3.6.5+20220909-1 MIGRATED to testing (Debian testing watch)
[2022-12-12] Accepted libsass 3.6.5+20220909-1 (source) into unstable (Jonas Smedegaard)
[2022-10-12] Accepted libsass 3.6.5+20211226-1~bpo11+2 (source) into bullseye-backports (Anthony Fok)
[2022-10-11] Accepted libsass 3.6.5+20211226-1~bpo11+1 (source amd64) into bullseye-backports (Debian FTP Masters) (signed by: Anthony Fok)
[2022-09-27] Accepted libsass 3.6.5+20211226-2 (source) into experimental (Jonas Smedegaard)
[2022-01-05] libsass 3.6.5+20211226-1 MIGRATED to testing (Debian testing watch)
[2022-01-02] Accepted libsass 3.6.5+20211226-1 (source) into unstable (Jonas Smedegaard)
[2021-11-20] libsass 3.6.5+20211111-2 MIGRATED to testing (Debian testing watch)
[2021-11-20] libsass 3.6.5+20211111-2 MIGRATED to testing (Debian testing watch)
[2021-11-17] Accepted libsass 3.6.5+20211111-2 (source) into unstable (Jonas Smedegaard)
[2021-11-17] Accepted libsass 3.6.5+20211111-1 (source) into experimental (Jonas Smedegaard)
[2021-09-11] libsass 3.6.5+20210718-1 MIGRATED to testing (Debian testing watch)
[2021-09-08] Accepted libsass 3.6.5+20210718-1 (source) into unstable (Jonas Smedegaard)
[2021-08-16] libsass 3.6.4+20210501-1 MIGRATED to testing (Debian testing watch)
[2021-06-02] Accepted libsass 3.6.5-1 (source) into experimental (Jonas Smedegaard)
[2021-05-06] Accepted libsass 3.6.4+20210501-1 (source) into unstable (Jonas Smedegaard)
[2021-01-12] libsass 3.6.4+20201122-1 MIGRATED to testing (Debian testing watch)
[2021-01-09] Accepted libsass 3.6.4+20201122-1 (source) into unstable (Jonas Smedegaard)
[2021-01-08] Accepted libsass 3.6.4+20201122-1~exp (source) into experimental (Jonas Smedegaard)
[2021-01-08] Accepted libsass 3.6.4-4 (source) into unstable (Jonas Smedegaard)
[2021-01-07] Accepted libsass 3.6.4-4~exp1 (source) into experimental (Jonas Smedegaard)
[2020-12-08] Accepted libsass 3.6.4-3~bpo10+1 (source amd64) into buster-backports, buster-backports (Debian FTP Masters) (signed by: Anthony Fok)
[2020-06-11] libsass 3.6.4-3 MIGRATED to testing (Debian testing watch)
[2020-06-09] Accepted libsass 3.6.4-4~exp (source) into experimental (Jonas Smedegaard)
[2020-06-09] Accepted libsass 3.6.4-3 (source) into unstable (Jonas Smedegaard)
[2020-06-08] Accepted libsass 3.6.4-2 (source) into unstable (Jonas Smedegaard)

bugs [bug history graph]

all: 7 8
RC: 0
I&N: 6 7
M&W: 1
F&P: 0
patch: 1

links

homepage
lintian
buildd: logs, checks, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 3.6.5+20220909-1ubuntu1
2 bugs
patches for 3.6.5+20220909-1ubuntu1