Debian Package Tracker

general

source: rkt (main)
version: 1.30.0+dfsg1-9
maintainer: Dmitry Smirnov (DMD)
uploaders: Michael Stapelberg [DMD] – Debian Go Packaging Team (archive) [DMD] – Tim Potter [DMD]
arch: all any
std-ver: 4.4.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

unstable: 1.30.0+dfsg1-9

versioned links

1.30.0+dfsg-7: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.30.0+dfsg1-9: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

golang-github-rkt-rkt-dev
rkt

action needed

3 security issues in sid high

There are 3 open security issues in sid.

3 important issues:

CVE-2019-10144: rkt through version 1.30.0 does not isolate processes in containers that are run with `rkt enter`. Processes run with `rkt enter` are given all capabilities during stage 2 (the actual environment in which the applications run). Compromised containers could exploit this flaw to access host resources.
CVE-2019-10145: rkt through version 1.30.0 does not isolate processes in containers that are run with `rkt enter`. Processes run with `rkt enter` do not have seccomp filtering during stage 2 (the actual environment in which the applications run). Compromised containers could exploit this flaw to access host resources.
CVE-2019-10147: rkt through version 1.30.0 does not isolate processes in containers that are run with `rkt enter`. Processes run with `rkt enter` are not limited by cgroups during stage 2 (the actual environment in which the applications run). Compromised containers could exploit this flaw to access host resources.

Please fix them.

Created: 2019-05-31 Last update: 2019-12-20 12:30

The package has not entered testing even though the delay is over normal

The package has not entered testing even though the 5-day delay is over. Check why.

Created: 2019-12-25 Last update: 2020-06-04 12:04

3 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit fe74d2b8ff81e2f423038d3e9388fec53443c3a5
Author: Dmitry Smirnov <onlyjob@member.fsf.org>
Date:   Sun Dec 22 10:49:27 2019 +1100

    prerm: run `rkt gc --grace-period=0` to clean-up before removal.

commit 5672e5b9797078dac3e86761092e8920c99ee405
Author: Dmitry Smirnov <onlyjob@member.fsf.org>
Date:   Fri Dec 20 14:17:03 2019 +1100

    CI: re-factored

commit ba7c07168c362f9f1361fb9f59001fdd0a9af799
Author: Dmitry Smirnov <onlyjob@member.fsf.org>
Date:   Fri Dec 20 14:15:56 2019 +1100

    Minor lintian-override

https://salsa.debian.org/api/v4/projects/go-team%2Fpackages%2Frkt/pipelines?scope=finished&per_page=1 API request failed: 403 Forbidden at /srv/qa.debian.org/data/vcswatch/vcswatch line 402.

Created: 2019-12-20 Last update: 2020-06-03 19:35

lintian reports 2 warnings normal

Lintian reports 2 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2020-05-21 Last update: 2020-05-21 00:08

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2019-06-08 Last update: 2019-06-08 19:19

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.5.0 instead of 4.4.1).

Created: 2020-01-21 Last update: 2020-01-21 05:05

testing migrations

excuses:
- Migration status for rkt (- to 1.30.0+dfsg1-9): BLOCKED: Rejected/violates migration policy/introduces a regression
- Issues preventing migration:
- Updating rkt introduces new bugs: #929781
- rkt/amd64 has unsatisfiable Built-Using on golang-1.13 1.13.5-1
- rkt/amd64 has unsatisfiable Built-Using on golang-golang-x-net-dev 1:0.0+git20191112.2180aed+dfsg-1
- rkt/arm64 has unsatisfiable Built-Using on golang-1.10 1.10.3-1
- rkt/arm64 has unsatisfiable Built-Using on golang-golang-x-net-dev 1:0.0+git20180124.0ed95ab+dfsg-2
- rkt/armel has unsatisfiable Built-Using on golang-1.13 1.13.5-1
- rkt/armel has unsatisfiable Built-Using on golang-golang-x-net-dev 1:0.0+git20191112.2180aed+dfsg-1
- rkt/armhf has unsatisfiable Built-Using on golang-1.13 1.13.5-1
- rkt/armhf has unsatisfiable Built-Using on golang-golang-x-net-dev 1:0.0+git20191112.2180aed+dfsg-1
- rkt/i386 has unsatisfiable Built-Using on golang-1.13 1.13.5-1
- rkt/i386 has unsatisfiable Built-Using on golang-golang-x-net-dev 1:0.0+git20191112.2180aed+dfsg-1
- rkt/ppc64el has unsatisfiable Built-Using on golang-1.10 1.10.3-1
- rkt/ppc64el has unsatisfiable Built-Using on golang-golang-x-net-dev 1:0.0+git20180124.0ed95ab+dfsg-2
- missing build on arm64
- missing build on ppc64el
- arch:arm64 not built yet, autopkgtest delayed there
- Additional info:
- Piuparts tested OK - https://piuparts.debian.org/sid/source/r/rkt.html
- 167 days old (needed 5 days)
- Not considered

news

[rss feed]

[2019-12-20] Accepted rkt 1.30.0+dfsg1-9 (source) into unstable (Dmitry Smirnov)
[2019-10-17] Accepted rkt 1.30.0+dfsg1-8 (source) into unstable (Dmitry Smirnov)
[2019-06-24] rkt REMOVED from testing (Debian testing watch)
[2018-12-04] rkt 1.30.0+dfsg-7 MIGRATED to testing (Debian testing watch)
[2018-12-04] rkt 1.30.0+dfsg-7 MIGRATED to testing (Debian testing watch)
[2018-09-17] Accepted rkt 1.30.0+dfsg-7 (source all amd64) into unstable (Dmitry Smirnov)
[2018-08-17] Accepted rkt 1.30.0+dfsg-6 (source all amd64) into unstable (Dmitry Smirnov)
[2018-07-31] rkt 1.30.0+dfsg-5 MIGRATED to testing (Debian testing watch)
[2018-07-25] Accepted rkt 1.30.0+dfsg-5 (source all amd64) into unstable (Dmitry Smirnov)
[2018-06-28] rkt 1.30.0+dfsg-4 MIGRATED to testing (Debian testing watch)
[2018-06-23] Accepted rkt 1.30.0+dfsg-4 (source all amd64) into unstable (Dmitry Smirnov)
[2018-06-12] rkt 1.30.0+dfsg-3 MIGRATED to testing (Debian testing watch)
[2018-06-07] Accepted rkt 1.30.0+dfsg-3 (source all amd64) into unstable (Dmitry Smirnov)
[2018-06-06] Accepted rkt 1.30.0+dfsg-2 (source all amd64) into unstable (Dmitry Smirnov)
[2018-05-27] Accepted rkt 1.30.0+dfsg-1 (source all amd64) into unstable (Dmitry Smirnov)
[2018-01-30] Accepted rkt 1.29.0+dfsg-1 (source all amd64) into unstable, unstable (Michael Stapelberg)
[2017-01-29] rkt REMOVED from testing (Debian testing watch)
[2016-12-19] rkt 1.21.0+dfsg-1 MIGRATED to testing (Debian testing watch)
[2016-12-08] Accepted rkt 1.21.0+dfsg-1 (source all amd64) into unstable (Dmitry Smirnov)
[2016-12-07] Accepted rkt 1.20.0+dfsg-1 (source all amd64) into unstable (Dmitry Smirnov)
[2016-10-26] rkt 1.16.0+dfsg-1 MIGRATED to testing (Debian testing watch)
[2016-10-26] rkt 1.16.0+dfsg-1 MIGRATED to testing (Debian testing watch)
[2016-10-13] Accepted rkt 1.16.0+dfsg-1 (source all amd64) into unstable (Dmitry Smirnov)
[2016-09-02] rkt REMOVED from testing (Debian testing watch)
[2016-08-26] Accepted rkt 1.13.0+dfsg-1 (source all amd64) into unstable (Dmitry Smirnov)
[2016-07-09] Accepted rkt 1.10.0+dfsg-1 (source all amd64) into unstable (Dmitry Smirnov)
[2016-07-03] Accepted rkt 1.9.1+dfsg-1 (source all amd64) into unstable (Dmitry Smirnov)
[2016-06-19] rkt 1.5.1+dfsg-1 MIGRATED to testing (Debian testing watch)
[2016-06-18] rkt REMOVED from testing (Debian testing watch)
[2016-05-21] Accepted rkt 1.5.1+dfsg-1 (source all amd64) into unstable (Dmitry Smirnov)

bugs [bug history graph]

all: 4
RC: 1
I&N: 3
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (0, 2)
buildd: logs, checks, clang, cross
popcon
browse source code
edit tags
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.30.0+dfsg1-9
1 bug