Debian Package Tracker

general

source: ruby-zip (main)
version: 1.2.1-1.1
maintainer: Debian Ruby Extras Maintainers (archive) [DMD]
uploaders: Pirate Praveen [DMD]
arch: any
std-ver: 4.0.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 1.1.6-1+deb8u1
old-sec: 1.1.6-1+deb8u2
stable: 1.2.0-1.1
testing: 1.2.1-1.1
unstable: 1.2.1-1.1

versioned links

1.1.6-1+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.1.6-1+deb8u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.2.0-1.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.2.1-1.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

ruby-zip

action needed

A new upstream version is available: 1.2.2 high

A new upstream version 1.2.2 is available, you should consider packaging it.

Created: 2018-09-04 Last update: 2018-12-13 13:46

1 security issue in stretch high

There is 1 open security issue in stretch.

1 important issue:

CVE-2018-1000544: rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file that contains symlinks or files with absolute pathnames "../" to write arbitrary files to the filesystem..

Please fix it.

Created: 2018-06-28 Last update: 2018-08-22 06:49

Multiarch hinter reports 1 issue(s) normal

There are issues with the multiarch metadata for this package.

ruby-zip could be marked Multi-Arch: same

Created: 2017-06-29 Last update: 2018-12-13 15:32

3 new commits since last upload, time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 1.2.2-1, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 84bca46ec9320ef6427ca0e9d9280ae9037a5a79
Author: Manas Kashyap <manaskashyaptech@gmail.com>
Date:   Tue Nov 6 04:42:19 2018 +0000

    upstream release

commit 65087a2a62058a146fd5db393119aa5407d8683f
Merge: c2b4162 24855f2
Author: Manas Kashyap <manaskashyaptech@gmail.com>
Date:   Tue Nov 6 04:03:50 2018 +0000

    Update upstream source from tag 'upstream/1.2.2'
    
    Update to upstream version '1.2.2'
    with Debian dir f199018582a3b619e7c6e31f01d3f574f05e3a05

commit 24855f2c73914441478bfe28817baf9c2e849bd2
Author: Manas Kashyap <manaskashyaptech@gmail.com>
Date:   Tue Nov 6 04:03:48 2018 +0000

    New upstream version 1.2.2

The Vcs URL is using anonscm.debian.org. Please update it for the move to salsa.debian.org.

Created: 2018-11-06 Last update: 2018-12-13 07:27

lintian reports 2 warnings normal

Lintian reports 2 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2018-09-11 Last update: 2018-09-11 08:11

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.2.1 instead of 4.0.0).

Created: 2018-04-16 Last update: 2018-08-26 08:16

news

[rss feed]

[2018-08-17] ruby-zip 1.2.1-1.1 MIGRATED to testing (Debian testing watch)
[2018-08-15] Accepted ruby-zip 1.1.6-1+deb8u2 (source amd64) into oldstable (Markus Koschany)
[2018-08-15] Accepted ruby-zip 1.2.1-1.1 (source) into unstable (Markus Koschany)
[2018-08-14] ruby-zip REMOVED from testing (Debian testing watch)
[2017-07-03] ruby-zip 1.2.1-1 MIGRATED to testing (Debian testing watch)
[2017-06-28] Accepted ruby-zip 1.2.1-1 (source) into unstable (Sruthi Chandran) (signed by: Praveen Arimbrathodiyil)
[2017-03-09] Accepted ruby-zip 1.1.6-1+deb8u1 (source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2017-03-03] ruby-zip 1.2.0-1.1 MIGRATED to testing (Debian testing watch)
[2017-02-28] Accepted ruby-zip 1.2.0-1.1 (source) into unstable (Salvatore Bonaccorso)
[2016-09-15] ruby-zip 1.2.0-1 MIGRATED to testing (Debian testing watch)
[2016-09-10] Accepted ruby-zip 1.2.0-1 (source) into unstable (Sruthi Chandran) (signed by: Praveen Arimbrathodiyil)
[2015-09-03] ruby-zip 1.1.7-1 MIGRATED to testing (Britney)
[2015-08-29] Accepted ruby-zip 1.1.7-1 (source amd64) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2014-10-03] ruby-zip 1.1.6-1 MIGRATED to testing (Britney)
[2014-09-28] Accepted ruby-zip 1.1.6-1 (source) into unstable (David Suárez) (signed by: Antonio Terceiro)
[2014-09-05] Accepted ruby-zip 1.1.2-2 (source all) into unstable (Antonio Terceiro)
[2014-05-26] ruby-zip 1.1.2-1 MIGRATED to testing (Debian testing watch)
[2014-05-20] Accepted ruby-zip 1.1.2-1 (source amd64 all) (David Suárez) (signed by: Antonio Terceiro)

bugs [bug history graph]

all: 0

links

homepage
lintian (0, 2)
buildd: logs, checks, clang, reproducibility
popcon
debci
browse source code
edit tags
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.2.1-1.1