open-build-service - Debian Package Tracker

general

source: open-build-service (main)
version: 2.9.4-5
maintainer: Debian Ruby Extras Maintainers (archive) (DMD)
uploaders: Andrej Shadura [DMD]
arch: all
std-ver: 4.4.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 2.7.1-10
o-o-sec: 2.7.1-10+deb9u1
testing: 2.9.4-5
unstable: 2.9.4-5

versioned links

2.7.1-10: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.7.1-10+deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.9.4-5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

obs-productconverter
obs-server
obs-utils
obs-worker

action needed

A new upstream version is available: 2.10.18 high

A new upstream version 2.10.18 is available, you should consider packaging it.

Created: 2022-07-23 Last update: 2022-12-06 03:32

4 security issues in sid high

There are 4 open security issues in sid.

4 important issues:

CVE-2020-8020: A Improper Neutralization of Input During Web Page Generation vulnerability in open-build-service allows remote attackers to store arbitrary JS code to cause XSS. This issue affects: openSUSE open-build-service versions prior to 7cc32c8e2ff7290698e101d9a80a9dc29a5500fb.
CVE-2020-8021: a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package where the sourceaccess/access is disabled This issue affects: Open Build Service versions prior to 2.10.5.
CVE-2020-8031: A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Open Build Service allows remote attackers to store JS code in markdown that is not properly escaped, impacting confidentiality and integrity. This issue affects: Open Build Service versions prior to 2.10.8.
CVE-2018-12466: openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links.

Created: 2022-07-04 Last update: 2022-10-21 06:06

4 security issues in bookworm high

There are 4 open security issues in bookworm.

4 important issues:

CVE-2020-8020: A Improper Neutralization of Input During Web Page Generation vulnerability in open-build-service allows remote attackers to store arbitrary JS code to cause XSS. This issue affects: openSUSE open-build-service versions prior to 7cc32c8e2ff7290698e101d9a80a9dc29a5500fb.
CVE-2020-8021: a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package where the sourceaccess/access is disabled This issue affects: Open Build Service versions prior to 2.10.5.
CVE-2020-8031: A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Open Build Service allows remote attackers to store JS code in markdown that is not properly escaped, impacting confidentiality and integrity. This issue affects: Open Build Service versions prior to 2.10.8.
CVE-2018-12466: openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links.

Created: 2022-10-21 Last update: 2022-10-21 06:06

lintian reports 18 errors and 15 warnings high

Lintian reports 18 errors and 15 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2022-10-17 Last update: 2022-10-17 03:04

Multiarch hinter reports 1 issue(s) normal

There are issues with the multiarch metadata for this package.

obs-productconverter could be marked Multi-Arch: foreign

Created: 2016-12-16 Last update: 2022-12-06 08:38

Depends on packages which need a new maintainer normal

The packages that open-build-service depends on which need a new maintainer are:

rpm (#923352)
- Depends: rpm

Created: 2019-11-22 Last update: 2022-12-06 06:33

2 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit f4da772f3330593042b5f3409e275e9ce3069c56
Merge: 5d76c1b6 ed5aaf5d
Author: Jelmer Vernooĳ <jelmer@debian.org>
Date:   Sun Oct 30 17:50:09 2022 +0000

    Merge branch 'multiarch-fixes' into 'debian/master'
    
    Apply hints suggested by the multi-arch hinter
    
    See merge request debian/open-build-service!29

commit ed5aaf5d752c6680c3295c1b5005d11800efefb6
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Thu Sep 29 17:37:51 2022 +0000

    Apply multi-arch hints.
    + obs-productconverter: Add Multi-Arch: foreign.
    
    Changes-By: apply-multiarch-hints

https://salsa.debian.org/api/v4/projects/ruby-team%2Fopen-build-service API request failed: 404 Not Found at /srv/qa.debian.org/data/vcswatch/vcswatch line 400.

Created: 2022-11-05 Last update: 2022-12-03 08:43

RFH: The maintainer is looking for help with this package. normal

The current maintainer is looking for someone who can help with the maintenance of this package. If you are interested in this package, please consider helping out. One way you can help is offer to be a co-maintainer or triage bugs in the BTS. Please see bug number #984462 for more information.

Created: 2021-03-03 Last update: 2021-03-03 21:36

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.6.1 instead of 4.4.1).

Created: 2019-07-08 Last update: 2022-10-16 17:26

news

[rss feed]

[2022-10-21] open-build-service 2.9.4-5 MIGRATED to testing (Debian testing watch)
[2022-10-16] Accepted open-build-service 2.9.4-5 (source) into unstable (Andrej Shadura) (signed by: Andrew Shadura)
[2022-10-15] Accepted open-build-service 2.9.4-4.1 (source) into unstable (Michael Biebl)
[2022-07-22] Accepted open-build-service 2.9.4-4 (source) into unstable (Andrej Shadura) (signed by: Andrew Shadura)
[2021-02-03] Accepted open-build-service 2.7.1-10+deb9u1 (source all) into oldstable (Utkarsh Gupta)
[2020-04-13] Accepted open-build-service 2.9.4-3 (source) into unstable (Lucas Kanashiro)
[2019-03-18] Accepted open-build-service 2.9.4-2 (source) into unstable (Lucas Kanashiro)
[2019-02-07] Accepted open-build-service 2.9.4-1 (source all) into unstable (Andrew Lee (李健秋)) (signed by: 李健秋 Andrew Lee)
[2018-10-09] Accepted open-build-service 2.7.4-3 (source) into unstable (Andrew Lee (李健秋)) (signed by: 李健秋 Andrew Lee)
[2018-04-26] open-build-service REMOVED from testing (Debian testing watch)
[2018-03-17] open-build-service 2.7.4-2 MIGRATED to testing (Debian testing watch)
[2018-03-10] open-build-service REMOVED from testing (Debian testing watch)
[2017-09-04] open-build-service 2.7.4-2 MIGRATED to testing (Debian testing watch)
[2017-09-03] open-build-service REMOVED from testing (Debian testing watch)
[2017-08-12] open-build-service 2.7.4-2 MIGRATED to testing (Debian testing watch)
[2017-08-06] Accepted open-build-service 2.7.4-2 (source) into unstable (Andrew Lee (李健秋)) (signed by: 李健秋 Andrew Lee)
[2017-08-06] Accepted open-build-service 2.8.2-1 (source) into experimental (Andrew Lee (李健秋)) (signed by: 李健秋 Andrew Lee)
[2017-08-03] Accepted open-build-service 2.7.4-1 (source) into unstable (Andrew Lee (李健秋)) (signed by: 李健秋 Andrew Lee)
[2017-02-05] open-build-service 2.7.1-10 MIGRATED to testing (Debian testing watch)
[2017-01-25] Accepted open-build-service 2.7.1-10 (source all) into unstable (Andrew Lee (李健秋)) (signed by: 李健秋 Andrew Lee)
[2017-01-02] open-build-service 2.7.1-9 MIGRATED to testing (Debian testing watch)
[2016-12-22] Accepted open-build-service 2.7.1-9 (source) into unstable (Andrew Lee (李健秋)) (signed by: 李健秋 Andrew Lee)
[2016-12-19] Accepted open-build-service 2.7.1-8 (source amd64) into unstable (Andrew Lee (李健秋)) (signed by: 李健秋 Andrew Lee)
[2016-12-15] Accepted open-build-service 2.7.1-7 (source amd64) into unstable (Andrew Lee (李健秋)) (signed by: 李健秋 Andrew Lee)
[2016-12-08] Accepted open-build-service 2.7.1-6 (source amd64) into experimental (Andrew Lee (李健秋)) (signed by: 李健秋 Andrew Lee)
[2016-11-17] Accepted open-build-service 2.7.1-5 (source amd64) into experimental (Andrew Lee (李健秋)) (signed by: 李健秋 Andrew Lee)
[2016-10-25] Accepted open-build-service 2.7.1-4 (source amd64) into experimental (Andrew Lee (李健秋)) (signed by: 李健秋 Andrew Lee)
[2016-10-20] Accepted open-build-service 2.7.1-3 (source amd64) into experimental (Andrew Lee (李健秋)) (signed by: 李健秋 Andrew Lee)
[2016-10-19] Accepted open-build-service 2.7.1-2 (source amd64) into experimental (Andrew Lee (李健秋)) (signed by: 李健秋 Andrew Lee)
[2016-09-20] Accepted open-build-service 2.7.1-1 (source amd64) into experimental, experimental (Andrew Lee (李健秋)) (signed by: 李健秋 Andrew Lee)

bugs [bug history graph]

all: 9
RC: 0
I&N: 6
M&W: 2
F&P: 1
patch: 0

links

homepage
lintian (18, 15)
buildd: logs, reproducibility
popcon
browse source code
edit tags
other distros
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2.9.4-5