jqueryui - Debian Package Tracker

general

source: jqueryui (main)
version: 1.13.2+dfsg-1
maintainer: Debian Javascript Maintainers (archive) (DMD)
uploaders: Paul Gevers [DMD] – Pirate Praveen [DMD] – Marcelo Jorge Vieira (metal) [DMD]
arch: all
std-ver: 4.6.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1.12.1+dfsg-5
o-o-sec: 1.12.1+dfsg-5+deb10u1
oldstable: 1.12.1+dfsg-8+deb11u1
stable: 1.13.2+dfsg-1
testing: 1.13.2+dfsg-1
unstable: 1.13.2+dfsg-1

versioned links

1.12.1+dfsg-5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.12.1+dfsg-5+deb10u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.12.1+dfsg-8+deb11u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.13.2+dfsg-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libjs-jquery-ui (2 bugs: 0, 2, 0, 0)
libjs-jquery-ui-docs
node-jquery-ui

action needed

Problems while searching for a new upstream version high

uscan had problems while searching for a new upstream version:

In debian/watch no matching files for watch line
  https://github.com/jquery/jquery-ui/releases .*/v?(\d\S*)\.tar\.gz

Created: 2022-09-22 Last update: 2023-09-27 10:02

lintian reports 12 errors and 13 warnings high

Lintian reports 12 errors and 13 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2020-09-21 Last update: 2023-02-18 03:37

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2023-09-13 Last update: 2023-09-27 12:32

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 1.13.2+dfsg-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 30eb53b696d81549d37175b24303d371e150dac4
Author: Yadd <yadd@debian.org>
Date:   Wed May 31 14:05:22 2023 +0400

    Declare compliance with policy 4.6.2

commit 51d59e8a9f6664fbdf671cafe81438c183e5d288
Author: Yadd <yadd@debian.org>
Date:   Mon Oct 31 10:43:02 2022 +0100

    Update d/ch

commit cdf71bba62bba02947434c75131e646fbe83ec2e
Author: Yadd <yadd@debian.org>
Date:   Mon Oct 31 10:38:58 2022 +0100

    Replace /releases by /tags in GitHub urls

commit 38752557a0ee351a778d0274ec7bdaf75744c054
Author: Yadd <yadd@debian.org>
Date:   Mon Oct 31 10:38:55 2022 +0100

    Update standards version to 4.6.1, no changes needed.
    
    Changes-By: lintian-brush
    Fixes: lintian: out-of-date-standards-version
    See-also: https://lintian.debian.org/tags/out-of-date-standards-version.html

Created: 2022-10-31 Last update: 2023-09-27 05:34

1 low-priority security issue in bullseye low

There is 1 open security issue in bullseye.

1 issue left for the package maintainer to handle:

CVE-2022-31160: (needs triaging) jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are potentially vulnerable to cross-site scripting. Initializing a checkboxradio widget on an input enclosed within a label makes that parent label contents considered as the input label. Calling `.checkboxradio( "refresh" )` on such a widget and the initial HTML contained encoded HTML entities will make them erroneously get decoded. This can lead to potentially executing JavaScript code. The bug has been patched in jQuery UI 1.13.2. To remediate the issue, someone who can change the initial HTML can wrap all the non-input contents of the `label` in a `span`.

You can find information about how to handle this issue in the security team's documentation.

Created: 2022-07-24 Last update: 2023-06-11 06:30

debian/patches: 1 patch to forward upstream low

Among the 3 debian patches available in version 1.13.2+dfsg-1 of the package, we noticed the following issues:

1 patch where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-02-26 Last update: 2023-02-27 20:59

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.6.2 instead of 4.6.0).

Created: 2022-05-11 Last update: 2022-12-17 19:17

news

[rss feed]

[2022-12-06] Accepted jqueryui 1.12.1+dfsg-5+deb10u1 (source) into oldstable (Utkarsh Gupta)
[2022-08-02] jqueryui 1.13.2+dfsg-1 MIGRATED to testing (Debian testing watch)
[2022-07-28] Accepted jqueryui 1.13.2+dfsg-1 (source) into unstable (Paul Gevers)
[2022-02-23] jqueryui 1.13.1+dfsg-1 MIGRATED to testing (Debian testing watch)
[2022-02-23] jqueryui 1.13.1+dfsg-1 MIGRATED to testing (Debian testing watch)
[2022-02-18] Accepted jqueryui 1.13.1+dfsg-1 (source) into unstable (Yadd) (signed by: Xavier Guimard)
[2021-12-12] Accepted jqueryui 1.12.1+dfsg-8+deb11u1 (source) into proposed-updates->stable-new, proposed-updates (Debian FTP Masters) (signed by: Xavier Guimard)
[2021-11-13] jqueryui 1.13.0+dfsg-1 MIGRATED to testing (Debian testing watch)
[2021-11-08] Accepted jqueryui 1.13.0+dfsg-1 (source) into unstable (Yadd) (signed by: Xavier Guimard)
[2021-01-18] jqueryui 1.12.1+dfsg-8 MIGRATED to testing (Debian testing watch)
[2021-01-12] Accepted jqueryui 1.12.1+dfsg-8 (source) into unstable (Xavier Guimard)
[2020-10-03] jqueryui 1.12.1+dfsg-7 MIGRATED to testing (Debian testing watch)
[2020-09-28] Accepted jqueryui 1.12.1+dfsg-7 (source) into unstable (Xavier Guimard)
[2020-09-27] Accepted jqueryui 1.12.1+dfsg-6 (source) into unstable (Xavier Guimard)
[2017-08-12] jqueryui 1.12.1+dfsg-5 MIGRATED to testing (Debian testing watch)
[2017-08-06] Accepted jqueryui 1.12.1+dfsg-5 (source) into unstable (Paul Gevers)
[2017-03-15] Accepted jqueryui 1.12.1+dfsg-4~bpo8+1 (source all) into jessie-backports->backports-policy, jessie-backports (Andreas Tille)
[2017-02-08] jqueryui 1.12.1+dfsg-4 MIGRATED to testing (Debian testing watch)
[2017-02-05] Accepted jqueryui 1.12.1+dfsg-4 (source) into unstable (Paul Gevers)
[2016-12-22] jqueryui 1.12.1+dfsg-3 MIGRATED to testing (Debian testing watch)
[2016-12-11] Accepted jqueryui 1.12.1+dfsg-3 (source all) into unstable, unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2016-12-06] jqueryui 1.12.1+dfsg-2 MIGRATED to testing (Debian testing watch)
[2016-11-30] Accepted jqueryui 1.12.1+dfsg-2 (source) into unstable (Paul Gevers)
[2016-11-05] jqueryui 1.12.1+dfsg-1 MIGRATED to testing (Debian testing watch)
[2016-10-30] Accepted jqueryui 1.12.1+dfsg-1 (source) into unstable (Paul Gevers)
[2015-06-29] Accepted jqueryui 1.8.dfsg-3+deb6u1 (source all) into squeeze-lts (Thorsten Alteholz)
[2015-05-03] Accepted jqueryui 1.8.ooops.21+dfsg-2+deb7u1 (source all) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Sebastien Delafond)
[2013-05-05] jqueryui 1.10.1+dfsg-1 MIGRATED to testing (Debian testing watch)
[2013-02-20] Accepted jqueryui 1.10.1+dfsg-1 (source all) (Marcelo Jorge Vieira (metal))
[2012-08-23] Accepted jqueryui 1.8.ooops.23+dfsg-1 (source all) (Marcelo Jorge Vieira (metal))

bugs [bug history graph]

all: 3
RC: 0
I&N: 2
M&W: 1
F&P: 0
patch: 1

links

homepage
lintian (12, 13)
buildd: logs, reproducibility
popcon
browse source code
edit tags
other distros
security tracker
debian patches

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.13.2+dfsg-1