python-parsl - Debian Package Tracker

general

source: python-parsl (main)
version: 2026.01.05+ds-1
maintainer: Debian Python Team (DMD)
uploaders: Étienne Mollier [DMD]
arch: all
std-ver: 4.7.3
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

stable: 2025.01.13+ds-1
testing: 2025.12.15+ds-1
unstable: 2026.01.05+ds-1

versioned links

2025.01.13+ds-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2025.12.15+ds-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2026.01.05+ds-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

python-parsl-doc
python3-parsl (1 bugs: 0, 1, 0, 0)

action needed

Debci reports failed tests high

unstable: fail (log)
The tests ran in 0:01:57
Last run: 2025-12-17T18:25:05.000Z
Previous status: unknown

testing: pass (log)
The tests ran in 0:01:39
Last run: 2025-12-10T18:02:14.000Z
Previous status: unknown

stable: pass (log)
The tests ran in 0:01:16
Last run: 2025-11-10T05:54:19.000Z
Previous status: unknown

Created: 2025-12-17 Last update: 2026-01-09 05:32

1 security issue in trixie high

There is 1 open security issue in trixie.

1 important issue:

CVE-2026-21892: Parsl is a Python parallel scripting library. A SQL Injection vulnerability exists in the parsl-visualize component of versions prior to 2026.01.05. The application constructs SQL queries using unsafe string formatting (Python % operator) with user-supplied input (workflow_id) directly from URL routes. This allows an unauthenticated attacker with access to the visualization dashboard to inject arbitrary SQL commands, potentially leading to data exfiltration or denial of service against the monitoring database. Version 2026.01.05 fixes the issue.

Created: 2026-01-09 Last update: 2026-01-09 05:00

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2026-21892: Parsl is a Python parallel scripting library. A SQL Injection vulnerability exists in the parsl-visualize component of versions prior to 2026.01.05. The application constructs SQL queries using unsafe string formatting (Python % operator) with user-supplied input (workflow_id) directly from URL routes. This allows an unauthenticated attacker with access to the visualization dashboard to inject arbitrary SQL commands, potentially leading to data exfiltration or denial of service against the monitoring database. Version 2026.01.05 fixes the issue.

Created: 2026-01-09 Last update: 2026-01-09 05:00

1 security issue in forky high

There is 1 open security issue in forky.

1 important issue:

CVE-2026-21892: Parsl is a Python parallel scripting library. A SQL Injection vulnerability exists in the parsl-visualize component of versions prior to 2026.01.05. The application constructs SQL queries using unsafe string formatting (Python % operator) with user-supplied input (workflow_id) directly from URL routes. This allows an unauthenticated attacker with access to the visualization dashboard to inject arbitrary SQL commands, potentially leading to data exfiltration or denial of service against the monitoring database. Version 2026.01.05 fixes the issue.

Created: 2026-01-09 Last update: 2026-01-09 05:00

Marked for autoremoval on 08 February due to python-typing-inspect: #1123326 high

Version 2026.01.05+ds-1 of python-parsl is marked for autoremoval from testing on Sun 08 Feb 2026. It depends (transitively) on python-typing-inspect, affected by #1123326. You should try to prevent the removal by fixing these RC bugs.

Created: 2025-12-23 Last update: 2026-01-09 04:31

lintian reports 3 warnings normal

Lintian reports 3 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2025-12-10 Last update: 2026-01-07 11:01

2 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit d7d8d2357e5ddf02e53a1fbf701367ae24444d71
Author: Étienne Mollier <emollier@debian.org>
Date:   Tue Jan 6 20:46:01 2026 +0100

    pytest-9.patch: forwarded upstream.

commit c55931b82e808057d582c174d1212a696208ca77
Author: Étienne Mollier <emollier@debian.org>
Date:   Tue Jan 6 20:28:48 2026 +0100

    pytest-9.patch: fix typo caught by lintian in the Description.

Created: 2026-01-06 Last update: 2026-01-06 21:02

debian/patches: 1 patch to forward upstream low

Among the 5 debian patches available in version 2026.01.05+ds-1 of the package, we noticed the following issues:

1 patch where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2025-12-20 Last update: 2026-01-07 11:01

news

[rss feed]

[2026-01-09] python-parsl 2026.01.05+ds-1 MIGRATED to testing (Debian testing watch)
[2026-01-06] Accepted python-parsl 2026.01.05+ds-1 (source) into unstable (Étienne Mollier)
[2025-12-22] python-parsl 2025.12.15+ds-1 MIGRATED to testing (Debian testing watch)
[2025-12-19] Accepted python-parsl 2025.12.15+ds-1 (source) into unstable (Étienne Mollier)
[2025-12-13] python-parsl 2025.12.08+ds-1 MIGRATED to testing (Debian testing watch)
[2025-12-11] python-parsl 2025.12.01+ds-1 MIGRATED to testing (Debian testing watch)
[2025-12-11] Accepted python-parsl 2025.12.08+ds-1 (source) into unstable (Étienne Mollier)
[2025-12-02] Accepted python-parsl 2025.12.01+ds-1 (source) into unstable (Étienne Mollier)
[2025-11-21] python-parsl 2025.11.17+ds-1 MIGRATED to testing (Debian testing watch)
[2025-11-18] Accepted python-parsl 2025.11.17+ds-1 (source) into unstable (Étienne Mollier)
[2025-11-16] python-parsl 2025.11.10+ds-1 MIGRATED to testing (Debian testing watch)
[2025-11-13] Accepted python-parsl 2025.11.10+ds-1 (source) into unstable (Étienne Mollier)
[2025-11-07] python-parsl 2025.11.03+ds-1 MIGRATED to testing (Debian testing watch)
[2025-11-04] Accepted python-parsl 2025.11.03+ds-1 (source) into unstable (Étienne Mollier)
[2025-10-31] python-parsl 2025.10.27-1 MIGRATED to testing (Debian testing watch)
[2025-10-28] Accepted python-parsl 2025.10.27-1 (source) into unstable (Étienne Mollier)
[2025-10-04] python-parsl 2025.01.13+ds-2 MIGRATED to testing (Debian testing watch)
[2025-09-30] Accepted python-parsl 2025.01.13+ds-2 (source) into unstable (Étienne Mollier)
[2025-01-17] python-parsl 2025.01.13+ds-1 MIGRATED to testing (Debian testing watch)
[2025-01-14] Accepted python-parsl 2025.01.13+ds-1 (source) into unstable (Étienne Mollier)
[2024-12-20] python-parsl 2024.12.16+ds-1 MIGRATED to testing (Debian testing watch)
[2024-12-17] Accepted python-parsl 2024.12.16+ds-1 (source) into unstable (Étienne Mollier)
[2024-12-09] python-parsl 2024.12.02+ds-1 MIGRATED to testing (Debian testing watch)
[2024-12-06] Accepted python-parsl 2024.12.02+ds-1 (source) into unstable (Étienne Mollier)
[2024-11-29] python-parsl 2024.11.25+ds-1 MIGRATED to testing (Debian testing watch)
[2024-11-26] Accepted python-parsl 2024.11.25+ds-1 (source) into unstable (Étienne Mollier)
[2024-11-22] python-parsl 2024.11.18+ds-1 MIGRATED to testing (Debian testing watch)
[2024-11-19] Accepted python-parsl 2024.11.18+ds-1 (source) into unstable (Étienne Mollier)
[2024-11-15] python-parsl 2024.11.11+ds-1 MIGRATED to testing (Debian testing watch)
[2024-11-12] Accepted python-parsl 2024.11.11+ds-1 (source) into unstable (Étienne Mollier)

bugs [bug history graph]

all: 1
RC: 0
I&N: 1
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (0, 3)
buildd: logs, reproducibility
popcon
browse source code
edit tags
other distros
security tracker
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2026.01.05+ds-1