Debian Package Tracker

general

source: rexical (main)
version: 1.0.7-1
maintainer: Debian Ruby Extras Maintainers (archive) (DMD)
uploaders: Balasankar C [DMD]
arch: all
std-ver: 4.4.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 1.0.5-2
stable: 1.0.5-2
testing: 1.0.7-1
unstable: 1.0.7-1

versioned links

1.0.5-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.0.7-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

rexical

action needed

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 1.0.7-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 54251d031fe4eb53502f8226ad8351569c4c5d9e
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Fri Apr 24 13:48:46 2020 +0000

    Update standards version to 4.5.0, no changes needed.
    
    Fixes: lintian: out-of-date-standards-version
    See-also: https://lintian.debian.org/tags/out-of-date-standards-version.html

commit 799c33dcd80ba088e8e8e8effa1a3bedeb32adb1
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Fri Apr 24 13:48:12 2020 +0000

    Use canonical URL in Vcs-Git.
    
    Fixes: lintian: vcs-field-not-canonical
    See-also: https://lintian.debian.org/tags/vcs-field-not-canonical.html

commit 942641facaac7b01ed76891bdc8050cede85497d
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Fri Apr 24 13:47:38 2020 +0000

    Update Vcs-* headers from URL redirect.
    
    Fixes: lintian: vcs-obsolete-in-debian-infrastructure
    See-also: https://lintian.debian.org/tags/vcs-obsolete-in-debian-infrastructure.html

The Vcs URL is using anonscm.debian.org. Please update it for the move to salsa.debian.org.

Created: 2020-05-01 Last update: 2020-08-07 19:42

Multiarch hinter reports 1 issue(s) normal

There are issues with the multiarch metadata for this package.

rexical could have its dependency on ruby annotated with :any

Created: 2016-11-13 Last update: 2020-08-07 19:42

lintian reports 5 warnings normal

Lintian reports 5 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2020-07-29 Last update: 2020-07-29 12:34

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2019-5477: A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file` is being called with unsafe user input as the filename. This vulnerability appears in code generated by the Rexical gem versions v1.0.6 and earlier. Rexical is used by Nokogiri to generate lexical scanner code for parsing CSS queries. The underlying vulnerability was addressed in Rexical v1.0.7 and Nokogiri upgraded to this version of Rexical in Nokogiri v1.10.4.

Please fix it.

Created: 2019-08-30 Last update: 2020-08-07 06:08

1 ignored security issue in buster low

There is 1 open security issue in buster.

1 issue skipped by the security teams:

CVE-2019-5477: A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file` is being called with unsafe user input as the filename. This vulnerability appears in code generated by the Rexical gem versions v1.0.6 and earlier. Rexical is used by Nokogiri to generate lexical scanner code for parsing CSS queries. The underlying vulnerability was addressed in Rexical v1.0.7 and Nokogiri upgraded to this version of Rexical in Nokogiri v1.10.4.

Please fix it.

Created: 2019-08-30 Last update: 2020-08-07 06:08

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.5.0 instead of 4.4.1).

Created: 2020-01-21 Last update: 2020-01-21 05:06

news

[rss feed]

[2020-01-23] rexical 1.0.7-1 MIGRATED to testing (Debian testing watch)
[2020-01-20] Accepted rexical 1.0.7-1 (source) into unstable (Cédric Boutillier)
[2019-10-22] rexical REMOVED from testing (Debian testing watch)
[2015-07-25] rexical 1.0.5-2 MIGRATED to testing (Britney)
[2015-07-18] Accepted rexical 1.0.5-2 (source all) into unstable (Balasankar C)
[2015-06-08] Accepted rexical 1.0.5-1 (source all) into unstable, unstable (Balasankar C) (signed by: Praveen Arimbrathodiyil)

bugs [bug history graph]

all: 0

links

homepage
buildd: logs, clang, reproducibility
popcon
browse source code
edit tags
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.0.7-1