Register | Log in

ruby-devise-two-factor

Barebones two-factor authentication with Devise

Choose email to subscribe with

general

source: ruby-devise-two-factor (main)
version: 4.0.2-1
maintainer: Debian Ruby Team (archive) (DMD)
uploaders: Balasankar C [DMD]
arch: all
std-ver: 4.6.0
VCS: Git (Browse)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 3.1.0-2
old-bpo: 4.0.0-2~bpo11+1
stable: 4.0.2-1

versioned links

3.1.0-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.0.0-2~bpo11+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.0.2-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

ruby-devise-two-factor

package is gone

This package is not in any development repository. This probably means that the package has been removed (or has been renamed). Thus the information here is of little interest ... the package is going to disappear unless someone takes it over and reintroduces it.

action needed

Debci reports failed tests high

unstable: fail (log)
The tests ran in 0:00:13
Last run: 2025-04-17T05:31:37.000Z
Previous status: unknown

testing: pass (log)
The tests ran in 0:01:19
Last run: 2024-10-29T06:08:22.000Z
Previous status: unknown

stable: pass (log)
The tests ran in 0:00:49
Last run: 2025-06-28T02:21:12.000Z
Previous status: unknown

Created: 2024-09-30 Last update: 2025-07-11 10:05

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2024-8796: Under the default configuration, Devise-Two-Factor versions >= 2.2.0 & < 6.0.0 generate TOTP shared secrets that are 120 bits instead of the 128-bit minimum defined by RFC 4226. Using a shared secret shorter than the minimum to generate a multi-factor authentication code could make it easier for an attacker to guess the shared secret and generate valid TOTP codes.

Created: 2024-09-17 Last update: 2025-02-27 05:02

1 security issue in trixie high

There is 1 open security issue in trixie.

1 important issue:

CVE-2024-8796: Under the default configuration, Devise-Two-Factor versions >= 2.2.0 & < 6.0.0 generate TOTP shared secrets that are 120 bits instead of the 128-bit minimum defined by RFC 4226. Using a shared secret shorter than the minimum to generate a multi-factor authentication code could make it easier for an attacker to guess the shared secret and generate valid TOTP codes.

Created: 2024-09-17 Last update: 2024-09-20 18:00

No known security issue in bookworm wishlist

There is 1 open security issue in bookworm.

1 ignored issue:

CVE-2024-8796: Under the default configuration, Devise-Two-Factor versions >= 2.2.0 & < 6.0.0 generate TOTP shared secrets that are 120 bits instead of the 128-bit minimum defined by RFC 4226. Using a shared secret shorter than the minimum to generate a multi-factor authentication code could make it easier for an attacker to guess the shared secret and generate valid TOTP codes.

Created: 2024-09-17 Last update: 2025-04-16 00:30

news

[2025-04-15] Removed 4.0.2-1 from unstable (Debian FTP Masters)
[2024-10-30] ruby-devise-two-factor REMOVED from testing (Debian testing watch)
[2022-04-05] ruby-devise-two-factor 4.0.2-1 MIGRATED to testing (Debian testing watch)
[2022-04-01] Accepted ruby-devise-two-factor 4.0.2-1 (source) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2021-09-02] Accepted ruby-devise-two-factor 4.0.0-2~bpo11+1 (source all) into bullseye-backports, bullseye-backports (Debian FTP Masters) (signed by: Praveen Arimbrathodiyil)
[2021-08-29] ruby-devise-two-factor 4.0.0-2 MIGRATED to testing (Debian testing watch)
[2021-08-27] Accepted ruby-devise-two-factor 4.0.0-2 (source) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2021-04-27] Accepted ruby-devise-two-factor 4.0.0-1 (source) into experimental (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2020-04-02] Accepted ruby-devise-two-factor 3.1.0-2~bpo10+1 (source all) into buster-backports (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2020-04-02] ruby-devise-two-factor 3.1.0-2 MIGRATED to testing (Debian testing watch)
[2020-03-29] Accepted ruby-devise-two-factor 3.1.0-2 (source) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2020-02-04] Accepted ruby-devise-two-factor 3.1.0-1 (source) into experimental (Sruthi Chandran)
[2019-09-12] Accepted ruby-devise-two-factor 3.0.3-1~bpo10+1 (source all) into buster-backports, buster-backports (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2019-07-30] ruby-devise-two-factor 3.0.3-2 MIGRATED to testing (Debian testing watch)
[2019-07-28] Accepted ruby-devise-two-factor 3.0.3-2 (source) into unstable (Balasankar C)
[2019-02-20] ruby-devise-two-factor REMOVED from testing (Debian testing watch)
[2018-09-16] ruby-devise-two-factor 3.0.3-1 MIGRATED to testing (Debian testing watch)
[2018-09-13] Accepted ruby-devise-two-factor 3.0.3-1 (source all) into unstable (Lucas Kanashiro)
[2018-06-23] ruby-devise-two-factor 3.0.0-2 MIGRATED to testing (Debian testing watch)
[2018-01-26] ruby-devise-two-factor REMOVED from testing (Debian testing watch)
[2016-08-13] ruby-devise-two-factor 3.0.0-2 MIGRATED to testing (Debian testing watch)
[2016-07-30] ruby-devise-two-factor REMOVED from testing (Debian testing watch)
[2016-07-17] ruby-devise-two-factor 3.0.0-2 MIGRATED to testing (Debian testing watch)
[2016-07-09] Accepted ruby-devise-two-factor 3.0.0-2 (source) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2016-06-16] Accepted ruby-devise-two-factor 3.0.0-1 (source) into experimental (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2015-12-20] ruby-devise-two-factor 2.0.0-1 MIGRATED to testing (Debian testing watch)
[2015-09-17] Accepted ruby-devise-two-factor 2.0.0-1 (source all) into unstable (Balasankar C)
[2015-07-23] Accepted ruby-devise-two-factor 1.1.0-1 (source all) into unstable, unstable (Balasankar C) (signed by: Praveen Arimbrathodiyil)

bugs [bug history graph]

all: 0

links

homepage
buildd: logs
popcon
browse source code
edit tags
other distros
security tracker
screenshots
debci

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing