nim - Debian Package Tracker

general

source: nim (main)
version: 1.6.10-1
maintainer: Federico Ceratto (DMD)
arch: all alpha amd64 arm64 armel armhf hppa hurd-i386 i386 ia64 m68k mips mips64el mipsel powerpc powerpcspe ppc64 ppc64el sh4 sparc64 x32
std-ver: 4.6.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.16.0-1
o-o-bpo: 0.17.0-2~bpo9+1
oldstable: 0.19.4-1
old-bpo: 1.0.4-1~bpo10+1
stable: 1.4.6+really1.4.2-2
stable-bpo: 1.6.2-1~bpo11+1
testing: 1.6.10-1
unstable: 1.6.10-1

versioned links

0.16.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.17.0-2~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.19.4-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.0.4-1~bpo10+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.4.6+really1.4.2-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.6.2-1~bpo11+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.6.10-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

nim (1 bugs: 0, 0, 1, 0)
nim-doc

action needed

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2021-41259: Nim is a systems programming language with a focus on efficiency, expressiveness, and elegance. In affected versions the uri.parseUri function which may be used to validate URIs accepts null bytes in the input URI. This behavior could be used to bypass URI validation. For example: parseUri("http://localhost\0hello").hostname is set to "localhost\0hello". Additionally, httpclient.getContent accepts null bytes in the input URL and ignores any data after the first null byte. Example: getContent("http://localhost\0hello") makes a request to localhost:80. An attacker can use a null bytes to bypass the check and mount a SSRF attack.

Created: 2022-07-04 Last update: 2022-11-29 06:00

1 security issue in bookworm high

There is 1 open security issue in bookworm.

1 important issue:

CVE-2021-41259: Nim is a systems programming language with a focus on efficiency, expressiveness, and elegance. In affected versions the uri.parseUri function which may be used to validate URIs accepts null bytes in the input URI. This behavior could be used to bypass URI validation. For example: parseUri("http://localhost\0hello").hostname is set to "localhost\0hello". Additionally, httpclient.getContent accepts null bytes in the input URL and ignores any data after the first null byte. Example: getContent("http://localhost\0hello") makes a request to localhost:80. An attacker can use a null bytes to bypass the check and mount a SSRF attack.

Created: 2022-11-29 Last update: 2022-11-29 06:00

2 bugs tagged patch in the BTS normal

The BTS contains patches fixing 2 bugs, consider including or untagging them.

Created: 2022-07-27 Last update: 2022-12-04 23:02

Fails to build during reproducibility testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2022-12-01 Last update: 2022-12-04 18:05

8 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 8eb1041d975e80d627ef7a4415cba90636e7d93a
Author: Federico Ceratto <federico@debian.org>
Date:   Wed Nov 23 19:23:52 2022 +0000

    Release to Unstable

commit ec3d9777f4371332182e145f8e5b254632d1a789
Author: Federico Ceratto <federico@debian.org>
Date:   Wed Nov 23 19:22:33 2022 +0000

    Add libpcre3 dep, fix ssl dep

commit f10d61527c4317ab1dece29026d714d5670b5355
Author: Federico Ceratto <federico@debian.org>
Date:   Wed Nov 23 19:18:57 2022 +0000

    Set upstream metadata fields: Bug-Database.
    
    Changes-By: lintian-brush

commit cf520541f91636a38ed425a93694530bcc2aa772
Author: Federico Ceratto <federico@debian.org>
Date:   Wed Nov 23 19:18:44 2022 +0000

    Update lintian override info format in d/nim.lintian-overrides on line 7.
    
    Changes-By: lintian-brush
    Fixes: lintian: mismatched-override
    See-also: https://lintian.debian.org/tags/mismatched-override.html

commit c9cc9d1744e9d130f390e15cb5d3cc6797e94f46
Author: Federico Ceratto <federico@debian.org>
Date:   Wed Nov 23 19:18:31 2022 +0000

    Bump up OpenSSL version

commit 09d2690982b3e5f3b364c8672f3812442591f40e
Author: Federico Ceratto <federico@debian.org>
Date:   Wed Nov 23 19:18:05 2022 +0000

    New release

commit 4efc674c9968ef50a0b61e09a691a53badc14c96
Merge: 31c9a9f44 19accef7d
Author: Federico Ceratto <federico@debian.org>
Date:   Wed Nov 23 19:11:52 2022 +0000

    Update upstream source from tag 'upstream/1.6.10'
    
    Update to upstream version '1.6.10'
    with Debian dir a37d523d1a8b8ec3ac575b0f574f527c46b57dd9

commit 19accef7d3d151f6a49f965166e3bce88e05e27f
Author: Federico Ceratto <federico@debian.org>
Date:   Wed Nov 23 19:07:09 2022 +0000

    New upstream version 1.6.10

Created: 2022-11-23 Last update: 2022-12-02 19:13

lintian reports 5 warnings normal

Lintian reports 5 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2022-11-24 Last update: 2022-11-24 11:08

Multiarch hinter reports 1 issue(s) low

There are issues with the multiarch metadata for this package.

nim-doc could be marked Multi-Arch: foreign

Created: 2016-09-14 Last update: 2022-12-04 22:07

1 low-priority security issue in bullseye low

There is 1 open security issue in bullseye.

1 issue left for the package maintainer to handle:

CVE-2021-41259: (needs triaging) Nim is a systems programming language with a focus on efficiency, expressiveness, and elegance. In affected versions the uri.parseUri function which may be used to validate URIs accepts null bytes in the input URI. This behavior could be used to bypass URI validation. For example: parseUri("http://localhost\0hello").hostname is set to "localhost\0hello". Additionally, httpclient.getContent accepts null bytes in the input URL and ignores any data after the first null byte. Example: getContent("http://localhost\0hello") makes a request to localhost:80. An attacker can use a null bytes to bypass the check and mount a SSRF attack.

You can find information about how to handle this issue in the security team's documentation.

Created: 2022-07-04 Last update: 2022-11-29 06:00

news

[rss feed]

[2022-11-29] nim 1.6.10-1 MIGRATED to testing (Debian testing watch)
[2022-11-23] Accepted nim 1.6.10-1 (source) into unstable (Federico Ceratto)
[2022-10-10] Accepted nim 1.6.8-1 (source) into unstable (Federico Ceratto)
[2022-06-14] nim REMOVED from testing (Debian testing watch)
[2022-05-12] nim 1.6.6-1 MIGRATED to testing (Debian testing watch)
[2022-05-06] Accepted nim 1.6.6-1 (source) into unstable (Federico Ceratto)
[2022-02-13] nim 1.6.4-1 MIGRATED to testing (Debian testing watch)
[2022-02-10] Accepted nim 1.6.4-1 (source) into unstable (Federico Ceratto)
[2022-01-06] Accepted nim 1.6.2-1~bpo11+1 (source amd64 all) into bullseye-backports, bullseye-backports (Debian FTP Masters) (signed by: Federico Ceratto)
[2021-12-19] nim 1.6.2-1 MIGRATED to testing (Debian testing watch)
[2021-12-17] Accepted nim 1.6.2-1 (source) into unstable (Federico Ceratto)
[2021-10-29] nim 1.6.0-1.1 MIGRATED to testing (Debian testing watch)
[2021-10-26] Accepted nim 1.6.0-1.1 (source) into unstable (Nilesh Patra)
[2021-10-26] Accepted nim 1.6.0-1 (source) into unstable (Federico Ceratto)
[2021-08-18] Accepted nim 1.4.8-3 (source) into unstable (Federico Ceratto)
[2021-08-16] Accepted nim 1.4.8-2 (source) into experimental (Federico Ceratto)
[2021-06-20] Accepted nim 1.4.8-1 (source) into experimental (Federico Ceratto)
[2021-05-30] nim 1.4.6+really1.4.2-2 MIGRATED to testing (Debian testing watch)
[2021-05-13] Accepted nim 1.4.6+really1.4.2-2 (source) into unstable (Federico Ceratto)
[2021-05-11] Accepted nim 1.4.6+really1.4.2-1 (source amd64 all) into unstable (Federico Ceratto)
[2021-04-19] Accepted nim 1.4.6-1 (source amd64 all) into unstable (Federico Ceratto)
[2020-12-08] nim 1.4.2-1 MIGRATED to testing (Debian testing watch)
[2020-12-02] Accepted nim 1.4.2-1 (source) into unstable (Federico Ceratto)
[2020-10-31] nim 1.4.0-1 MIGRATED to testing (Debian testing watch)
[2020-10-25] Accepted nim 1.4.0-1 (source) into unstable (Federico Ceratto)
[2020-08-13] nim 1.2.6-1 MIGRATED to testing (Debian testing watch)
[2020-08-07] Accepted nim 1.2.6-1 (source) into unstable (Federico Ceratto)
[2020-08-04] nim 1.2.6~rc1-1 MIGRATED to testing (Debian testing watch)
[2020-07-29] Accepted nim 1.2.6~rc1-1 (source) into unstable (Federico Ceratto)
[2020-07-15] nim 1.2.4-1 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 3
RC: 0
I&N: 2
M&W: 1
F&P: 0
patch: 2

links

homepage
lintian (0, 5)
buildd: logs, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.6.10-1