ruby-bindata - Debian Package Tracker

general

source: ruby-bindata (main)
version: 2.4.8-1
maintainer: Debian Ruby Team (archive) (DMD)
uploaders: Pirate Praveen [DMD]
arch: all
std-ver: 4.5.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 2.3.1-1
oldstable: 2.3.5-1
old-bpo: 2.4.8-1~bpo10+1
stable: 2.4.8-1
testing: 2.4.8-1
unstable: 2.4.8-1

versioned links

2.3.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.3.5-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.4.8-1~bpo10+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.4.8-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

ruby-bindata

action needed

A new upstream version is available: 2.4.10 high

A new upstream version 2.4.10 is available, you should consider packaging it.

Created: 2021-04-25 Last update: 2021-12-02 21:31

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2021-32823: In the bindata RubyGem before version 2.4.10 there is a potential denial-of-service vulnerability. In affected versions it is very slow for certain classes in BinData to be created. For example BinData::Bit100000, BinData::Bit100001, BinData::Bit100002, BinData::Bit<N>. In combination with <user_input>.constantize there is a potential for a CPU-based DoS. In version 2.4.10 bindata improved the creation time of Bits and Integers.

Created: 2021-06-28 Last update: 2021-08-15 00:00

1 security issue in bookworm high

There is 1 open security issue in bookworm.

1 important issue:

CVE-2021-32823: In the bindata RubyGem before version 2.4.10 there is a potential denial-of-service vulnerability. In affected versions it is very slow for certain classes in BinData to be created. For example BinData::Bit100000, BinData::Bit100001, BinData::Bit100002, BinData::Bit<N>. In combination with <user_input>.constantize there is a potential for a CPU-based DoS. In version 2.4.10 bindata improved the creation time of Bits and Integers.

Created: 2021-08-15 Last update: 2021-08-15 00:00

Multiarch hinter reports 1 issue(s) normal

There are issues with the multiarch metadata for this package.

ruby-bindata could have its dependency on ruby annotated with :any

Created: 2016-11-13 Last update: 2021-12-02 22:41

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 2.4.8-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit aca5634909e9e4d296adcbed5ccdcd3b59abd2b8
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Fri Sep 10 17:17:14 2021 +0000

    Update standards version to 4.5.1, no changes needed.
    
    Changes-By: lintian-brush
    Fixes: lintian: out-of-date-standards-version
    See-also: https://lintian.debian.org/tags/out-of-date-standards-version.html

commit 9324c2c2f3f83fae51fdddd97c8ed67bc7fc5feb
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Fri Jan 29 11:36:33 2021 +0000

    Apply multi-arch hints.
    + ruby-bindata: Add :any qualifier for ruby dependency.
    
    Changes-By: apply-multiarch-hints

Created: 2021-02-01 Last update: 2021-11-26 08:35

lintian reports 1 warning normal

Lintian reports 1 warning about this package. You should make the package lintian clean getting rid of them.

Created: 2021-09-06 Last update: 2021-09-06 18:35

1 low-priority security issue in buster low

There is 1 open security issue in buster.

1 issue left for the package maintainer to handle:

CVE-2021-32823: (needs triaging) In the bindata RubyGem before version 2.4.10 there is a potential denial-of-service vulnerability. In affected versions it is very slow for certain classes in BinData to be created. For example BinData::Bit100000, BinData::Bit100001, BinData::Bit100002, BinData::Bit<N>. In combination with <user_input>.constantize there is a potential for a CPU-based DoS. In version 2.4.10 bindata improved the creation time of Bits and Integers.

You can find information about how to handle this issue in the security team's documentation.

Created: 2021-06-28 Last update: 2021-08-15 00:00

1 low-priority security issue in bullseye low

There is 1 open security issue in bullseye.

1 issue left for the package maintainer to handle:

CVE-2021-32823: (needs triaging) In the bindata RubyGem before version 2.4.10 there is a potential denial-of-service vulnerability. In affected versions it is very slow for certain classes in BinData to be created. For example BinData::Bit100000, BinData::Bit100001, BinData::Bit100002, BinData::Bit<N>. In combination with <user_input>.constantize there is a potential for a CPU-based DoS. In version 2.4.10 bindata improved the creation time of Bits and Integers.

You can find information about how to handle this issue in the security team's documentation.

Created: 2021-08-14 Last update: 2021-08-15 00:00

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.6.0 instead of 4.5.0).

Created: 2020-11-17 Last update: 2021-08-18 14:02

news

[rss feed]

[2020-11-25] Accepted ruby-bindata 2.4.8-1~bpo10+1 (source all) into buster-backports, buster-backports (Debian FTP Masters) (signed by: Sruthi Chandran)
[2020-11-10] ruby-bindata 2.4.8-1 MIGRATED to testing (Debian testing watch)
[2020-11-08] Accepted ruby-bindata 2.4.8-1 (source) into unstable (Abraham Raji) (signed by: Praveen Arimbrathodiyil)
[2017-06-20] ruby-bindata 2.3.5-1 MIGRATED to testing (Debian testing watch)
[2017-01-27] Accepted ruby-bindata 2.3.5-1 (source) into unstable (Lucas Albuquerque Medeiros de Moura) (signed by: Christian Hofstaedtler)
[2016-06-27] ruby-bindata 2.3.1-1 MIGRATED to testing (Debian testing watch)
[2016-06-22] Accepted ruby-bindata 2.3.1-1 (source all) into unstable, unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)

bugs [bug history graph]

all: 1
RC: 0
I&N: 1
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (0, 1)
buildd: logs, clang, reproducibility
popcon
browse source code
edit tags
other distros
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2.4.8-1