Debian Package Tracker

general

source: rexical (main)
version: 1.0.5-2
maintainer: Debian Ruby Extras Maintainers (archive) (DMD)
uploaders: Balasankar C [DMD]
arch: all
std-ver: 3.9.6
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 1.0.5-2
stable: 1.0.5-2
testing: 1.0.5-2
unstable: 1.0.5-2

versioned links

1.0.5-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

rexical (1 bugs: 0, 1, 0, 0)

action needed

Debci reports failed tests high

unstable: fail (log)
The tests ran in 0h 0m 21s
Last run: 2019-09-12 07:45:25
Previous status: fail

testing: fail (log)
The tests ran in 0h 0m 23s
Last run: 2019-09-15 23:08:53
Previous status: fail

Created: 2016-03-16 Last update: 2019-09-21 01:42

Problems while searching for a new upstream version high

uscan had problems while searching for a new upstream version:

redirecting DEPRECATED pkg-ruby-extras.alioth.debian.org/cgi-bin/gemwatch to gemwatch.debian.net

Created: 2018-05-06 Last update: 2019-09-20 21:02

A new upstream version is available: 1.0.7 high

A new upstream version 1.0.7 is available, you should consider packaging it.

Created: 2019-08-08 Last update: 2019-09-20 21:02

1 security issue in stretch high

There is 1 open security issue in stretch.

1 important issue:

CVE-2019-5477: A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file` is being called with unsafe user input as the filename. This vulnerability appears in code generated by the Rexical gem versions v1.0.6 and earlier. Rexical is used by Nokogiri to generate lexical scanner code for parsing CSS queries. The underlying vulnerability was addressed in Rexical v1.0.7 and Nokogiri upgraded to this version of Rexical in Nokogiri v1.10.4.

Please fix it.

Created: 2019-08-30 Last update: 2019-09-01 03:36

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2019-5477: A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file` is being called with unsafe user input as the filename. This vulnerability appears in code generated by the Rexical gem versions v1.0.6 and earlier. Rexical is used by Nokogiri to generate lexical scanner code for parsing CSS queries. The underlying vulnerability was addressed in Rexical v1.0.7 and Nokogiri upgraded to this version of Rexical in Nokogiri v1.10.4.

Please fix it.

Created: 2019-08-30 Last update: 2019-09-01 03:36

1 security issue in buster high

There is 1 open security issue in buster.

1 important issue:

CVE-2019-5477: A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file` is being called with unsafe user input as the filename. This vulnerability appears in code generated by the Rexical gem versions v1.0.6 and earlier. Rexical is used by Nokogiri to generate lexical scanner code for parsing CSS queries. The underlying vulnerability was addressed in Rexical v1.0.7 and Nokogiri upgraded to this version of Rexical in Nokogiri v1.10.4.

Please fix it.

Created: 2019-08-30 Last update: 2019-09-01 03:36

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2019-5477: A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file` is being called with unsafe user input as the filename. This vulnerability appears in code generated by the Rexical gem versions v1.0.6 and earlier. Rexical is used by Nokogiri to generate lexical scanner code for parsing CSS queries. The underlying vulnerability was addressed in Rexical v1.0.7 and Nokogiri upgraded to this version of Rexical in Nokogiri v1.10.4.

Please fix it.

Created: 2019-08-30 Last update: 2019-09-01 03:36

Standards version of the package is outdated. high

The package is severely out of date with respect to the Debian Policy. The package should be updated to follow the last version of Debian Policy (Standards-Version 4.4.0 instead of 3.9.6).

Created: 2018-04-16 Last update: 2019-07-08 20:07

Multiarch hinter reports 1 issue(s) normal

There are issues with the multiarch metadata for this package.

rexical could have its dependency on ruby annotated with :any

Created: 2016-11-13 Last update: 2019-09-20 21:05

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 1.0.5-3, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit cd876646b9b57ab61d7f5c1102cbd662c054ad73
Author: Utkarsh Gupta <guptautkarsh2102@gmail.com>
Date:   Tue Aug 13 03:20:29 2019 +0530

    Update d/ch

commit 8cc445d9e476957d8f1fbed3441b1454d232daff
Author: Utkarsh Gupta <guptautkarsh2102@gmail.com>
Date:   Tue Aug 13 03:20:28 2019 +0530

    Add salsa-ci.yml

commit 64b16f30826bd9d285f59937773fc915f668d26a
Author: Cédric Boutillier <boutil@moszumanska.debian.org>
Date:   Fri Mar 4 15:15:02 2016 +0000

    Run wrap-and-sort on packaging files

commit 0340f2bbad91f1dbacbce2a7c206d0a286ea4c0d
Author: Cédric Boutillier <boutil@moszumanska.debian.org>
Date:   Fri Mar 4 13:06:40 2016 +0000

    Bump Standards-Version to 3.9.7 (no changes needed)

commit 5c614efe419046c77f765fb62b888efe04a20a26
Author: Cédric Boutillier <boutil@moszumanska.debian.org>
Date:   Fri Mar 4 12:50:38 2016 +0000

    Use https:// in Vcs-* fields

commit 8290b2e6188d721d6aae2cc0c7b394291eced747
Author: Cédric Boutillier <boutil@moszumanska.debian.org>
Date:   Fri Mar 4 12:30:23 2016 +0000

    Use https:// in Vcs-* fields

commit bc4e83c95a9dc9898e8daa3d0f3fef5863c03560
Author: Cédric Boutillier <boutil@moszumanska.debian.org>
Date:   Fri Mar 4 10:59:06 2016 +0000

    Bump debhelper compatibility level to 9

The Vcs URL git://anonscm.debian.org/pkg-ruby-extras/rexical.git is deprecated/defunct, https://anonscm.debian.org/git/pkg-ruby-extras/rexical.git was tried instead. Please update the Vcs field in debian/control.

Created: 2017-12-03 Last update: 2019-09-20 18:44

lintian reports 4 warnings normal

Lintian reports 4 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2019-09-03 Last update: 2019-09-03 00:53

The URL(s) for this package had some recent persistent issues low

DUCK reports some issues concerning upstream URLs defined for this package.

Created: 2019-01-12 Last update: 2019-09-21 02:35

news

[rss feed]

[2015-07-25] rexical 1.0.5-2 MIGRATED to testing (Britney)
[2015-07-18] Accepted rexical 1.0.5-2 (source all) into unstable (Balasankar C)
[2015-06-08] Accepted rexical 1.0.5-1 (source all) into unstable, unstable (Balasankar C) (signed by: Praveen Arimbrathodiyil)

bugs [bug history graph]

all: 1
RC: 0
I&N: 1
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (0, 4)
buildd: logs, clang, reproducibility
popcon
browse source code
edit tags
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.0.5-2build1