rexical - Debian Package Tracker

general

source: rexical (main)
version: 1.0.7-1
maintainer: Debian Ruby Extras Maintainers (archive) (DMD)
uploaders: Balasankar C [DMD]
arch: all
std-ver: 4.4.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 1.0.5-2
stable: 1.0.5-2
testing: 1.0.7-1
unstable: 1.0.7-1

versioned links

1.0.5-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.0.7-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

rexical

action needed

Multiarch hinter reports 1 issue(s) normal

There are issues with the multiarch metadata for this package.

rexical could have its dependency on ruby annotated with :any

Created: 2016-11-13 Last update: 2021-04-19 16:37

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 1.0.7-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 6076e6dbd9e3f86808de85369e723c01981a7b9a
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Tue Oct 27 20:14:31 2020 +0000

    Apply multi-arch hints.
    + rexical: Add :any qualifier for ruby dependency.
    
    Changes-By: apply-multiarch-hints

commit b4655704757b7f885a8059cfc485cb5781eafa53
Author: Cédric Boutillier <boutil@debian.org>
Date:   Thu Sep 3 20:06:21 2020 +0000

    [ci skip] Add .gitattributes to keep unwanted files out of the source package

commit 66c877b9005d38fc0b83efcb2ee3aeae3162d521
Author: Cédric Boutillier <boutil@debian.org>
Date:   Tue Sep 1 13:31:39 2020 +0000

    [ci skip] Update team name

commit 54251d031fe4eb53502f8226ad8351569c4c5d9e
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Fri Apr 24 13:48:46 2020 +0000

    Update standards version to 4.5.0, no changes needed.
    
    Fixes: lintian: out-of-date-standards-version
    See-also: https://lintian.debian.org/tags/out-of-date-standards-version.html

commit 799c33dcd80ba088e8e8e8effa1a3bedeb32adb1
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Fri Apr 24 13:48:12 2020 +0000

    Use canonical URL in Vcs-Git.
    
    Fixes: lintian: vcs-field-not-canonical
    See-also: https://lintian.debian.org/tags/vcs-field-not-canonical.html

commit 942641facaac7b01ed76891bdc8050cede85497d
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Fri Apr 24 13:47:38 2020 +0000

    Update Vcs-* headers from URL redirect.
    
    Fixes: lintian: vcs-obsolete-in-debian-infrastructure
    See-also: https://lintian.debian.org/tags/vcs-obsolete-in-debian-infrastructure.html

The Vcs URL is using anonscm.debian.org. Please update it for the move to salsa.debian.org.

Created: 2020-05-01 Last update: 2021-04-19 16:06

lintian reports 5 warnings normal

Lintian reports 5 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2020-07-29 Last update: 2020-07-29 12:34

1 low-priority security issue in buster low

There is 1 open security issue in buster.

1 issue left for the package maintainer to handle:

CVE-2019-5477: (needs triaging) A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file` is being called with unsafe user input as the filename. This vulnerability appears in code generated by the Rexical gem versions v1.0.6 and earlier. Rexical is used by Nokogiri to generate lexical scanner code for parsing CSS queries. The underlying vulnerability was addressed in Rexical v1.0.7 and Nokogiri upgraded to this version of Rexical in Nokogiri v1.10.4.

You can find information about how to handle this issue in the security team's documentation.

Created: 2021-02-19 Last update: 2021-03-21 19:04

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.5.1 instead of 4.4.1).

Created: 2020-01-21 Last update: 2020-11-17 05:41

news

[rss feed]

[2020-01-23] rexical 1.0.7-1 MIGRATED to testing (Debian testing watch)
[2020-01-20] Accepted rexical 1.0.7-1 (source) into unstable (Cédric Boutillier)
[2019-10-22] rexical REMOVED from testing (Debian testing watch)
[2015-07-25] rexical 1.0.5-2 MIGRATED to testing (Britney)
[2015-07-18] Accepted rexical 1.0.5-2 (source all) into unstable (Balasankar C)
[2015-06-08] Accepted rexical 1.0.5-1 (source all) into unstable, unstable (Balasankar C) (signed by: Praveen Arimbrathodiyil)

bugs [bug history graph]

all: 0

links

homepage
lintian (0, 5)
buildd: logs, clang, reproducibility
popcon
browse source code
edit tags
other distros
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.0.7-1