Debian Package Tracker

general

source: rexical (main)
version: 1.0.5-2
maintainer: Debian Ruby Extras Maintainers (archive) (DMD)
uploaders: Balasankar C [DMD]
arch: all
std-ver: 3.9.6
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 1.0.5-2
stable: 1.0.5-2
unstable: 1.0.5-2

versioned links

1.0.5-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

rexical (1 bugs: 0, 1, 0, 0)

action needed

Problems while searching for a new upstream version high

uscan had problems while searching for a new upstream version:

redirecting DEPRECATED pkg-ruby-extras.alioth.debian.org/cgi-bin/gemwatch to gemwatch.debian.net

Created: 2018-05-06 Last update: 2019-12-12 13:36

A new upstream version is available: 1.0.7 high

A new upstream version 1.0.7 is available, you should consider packaging it.

Created: 2019-08-08 Last update: 2019-12-12 13:36

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2019-5477: A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file` is being called with unsafe user input as the filename. This vulnerability appears in code generated by the Rexical gem versions v1.0.6 and earlier. Rexical is used by Nokogiri to generate lexical scanner code for parsing CSS queries. The underlying vulnerability was addressed in Rexical v1.0.7 and Nokogiri upgraded to this version of Rexical in Nokogiri v1.10.4.

Please fix it.

Created: 2019-08-30 Last update: 2019-10-21 19:14

Standards version of the package is outdated. high

The package is severely out of date with respect to the Debian Policy. The package should be updated to follow the last version of Debian Policy (Standards-Version 4.4.1 instead of 3.9.6).

Created: 2018-04-16 Last update: 2019-09-29 23:39

The package has not entered testing even though the delay is over normal

The package has not entered testing even though the 5-day delay is over. Check why.

Created: 2019-10-21 Last update: 2019-12-12 19:08

Multiarch hinter reports 1 issue(s) normal

There are issues with the multiarch metadata for this package.

rexical could have its dependency on ruby annotated with :any

Created: 2016-11-13 Last update: 2019-12-12 13:47

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 1.0.5-3, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit cd876646b9b57ab61d7f5c1102cbd662c054ad73
Author: Utkarsh Gupta <guptautkarsh2102@gmail.com>
Date:   Tue Aug 13 03:20:29 2019 +0530

    Update d/ch

commit 8cc445d9e476957d8f1fbed3441b1454d232daff
Author: Utkarsh Gupta <guptautkarsh2102@gmail.com>
Date:   Tue Aug 13 03:20:28 2019 +0530

    Add salsa-ci.yml

commit 64b16f30826bd9d285f59937773fc915f668d26a
Author: Cédric Boutillier <boutil@moszumanska.debian.org>
Date:   Fri Mar 4 15:15:02 2016 +0000

    Run wrap-and-sort on packaging files

commit 0340f2bbad91f1dbacbce2a7c206d0a286ea4c0d
Author: Cédric Boutillier <boutil@moszumanska.debian.org>
Date:   Fri Mar 4 13:06:40 2016 +0000

    Bump Standards-Version to 3.9.7 (no changes needed)

commit 5c614efe419046c77f765fb62b888efe04a20a26
Author: Cédric Boutillier <boutil@moszumanska.debian.org>
Date:   Fri Mar 4 12:50:38 2016 +0000

    Use https:// in Vcs-* fields

commit 8290b2e6188d721d6aae2cc0c7b394291eced747
Author: Cédric Boutillier <boutil@moszumanska.debian.org>
Date:   Fri Mar 4 12:30:23 2016 +0000

    Use https:// in Vcs-* fields

commit bc4e83c95a9dc9898e8daa3d0f3fef5863c03560
Author: Cédric Boutillier <boutil@moszumanska.debian.org>
Date:   Fri Mar 4 10:59:06 2016 +0000

    Bump debhelper compatibility level to 9

The Vcs URL git://anonscm.debian.org/pkg-ruby-extras/rexical.git is deprecated/defunct, https://anonscm.debian.org/git/pkg-ruby-extras/rexical.git was tried instead. Please update the Vcs field in debian/control.

Created: 2017-12-03 Last update: 2019-12-12 05:38

lintian reports 4 warnings normal

Lintian reports 4 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2019-09-03 Last update: 2019-09-03 00:53

The URL(s) for this package had some recent persistent issues low

DUCK reports some issues concerning upstream URLs defined for this package.

Created: 2019-01-12 Last update: 2019-12-12 18:07

1 ignored security issue in buster low

There is 1 open security issue in buster.

1 issue skipped by the security teams:

CVE-2019-5477: A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file` is being called with unsafe user input as the filename. This vulnerability appears in code generated by the Rexical gem versions v1.0.6 and earlier. Rexical is used by Nokogiri to generate lexical scanner code for parsing CSS queries. The underlying vulnerability was addressed in Rexical v1.0.7 and Nokogiri upgraded to this version of Rexical in Nokogiri v1.10.4.

Please fix it.

Created: 2019-08-30 Last update: 2019-10-21 19:14

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2019-5477: A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file` is being called with unsafe user input as the filename. This vulnerability appears in code generated by the Rexical gem versions v1.0.6 and earlier. Rexical is used by Nokogiri to generate lexical scanner code for parsing CSS queries. The underlying vulnerability was addressed in Rexical v1.0.7 and Nokogiri upgraded to this version of Rexical in Nokogiri v1.10.4.

Please fix it.

Created: 2019-08-30 Last update: 2019-10-21 19:14

testing migrations

excuses:
- Migration status for rexical (- to 1.0.5-2): BLOCKED: Rejected/violates migration policy/introduces a regression
- Issues preventing migration:
- Updating rexical introduces new bugs: #940905
- autopkgtest for rexical/1.0.5-2: amd64: Not a regression, arm64: Regression ♻
- Not built on buildd: arch all binaries uploaded by balasankarc@autistici.org, a new source-only upload is needed to allow migration
- Additional info:
- Piuparts tested OK - https://piuparts.debian.org/sid/source/r/rexical.html
- 1607 days old (needed 5 days)
- Not considered

news

[rss feed]

[2019-10-22] rexical REMOVED from testing (Debian testing watch)
[2015-07-25] rexical 1.0.5-2 MIGRATED to testing (Britney)
[2015-07-18] Accepted rexical 1.0.5-2 (source all) into unstable (Balasankar C)
[2015-06-08] Accepted rexical 1.0.5-1 (source all) into unstable, unstable (Balasankar C) (signed by: Praveen Arimbrathodiyil)

bugs [bug history graph]

all: 2
RC: 1
I&N: 1
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (0, 4)
buildd: logs, clang
popcon
browse source code
edit tags
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.0.5-2build1