Debian Package Tracker - ruby-doorkeeper

general

source: ruby-doorkeeper (main)
version: 4.4.2-1
maintainer: Debian Ruby Extras Maintainers (archive) (DMD)
uploaders: Pirate Praveen [DMD]
arch: all
std-ver: 4.2.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 4.2.0-3
old-bpo: 4.4.2-1~bpo9+1
stable: 4.4.2-1
testing: 4.4.2-1
unstable: 4.4.2-1

versioned links

4.2.0-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.4.2-1~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.4.2-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

ruby-doorkeeper

action needed

A new upstream version is available: 5.2.1 high

A new upstream version 5.2.1 is available, you should consider packaging it.

Created: 2019-06-13 Last update: 2019-10-19 13:12

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 4.4.2-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit c712fc77bfb792fe74211add4e31c4aa82b39d13
Author: Utkarsh Gupta <guptautkarsh2102@gmail.com>
Date:   Tue Aug 13 04:10:12 2019 +0530

    Update d/ch

commit ef4cec101176bfdab2ab8ba82bcadb0a316a51e9
Author: Utkarsh Gupta <guptautkarsh2102@gmail.com>
Date:   Tue Aug 13 04:10:12 2019 +0530

    Add salsa-ci.yml

Created: 2019-08-13 Last update: 2019-10-18 20:21

2 ignored security issues in stretch low

There are 2 open security issues in stretch.

2 issues skipped by the security teams:

CVE-2018-1000211: Doorkeeper version 4.2.0 and later contains a Incorrect Access Control vulnerability in Token revocation API's authorized method that can result in Access tokens are not revoked for public OAuth apps, leaking access until expiry.
CVE-2018-1000088: Doorkeeper version 2.1.0 through 4.2.5 contains a Cross Site Scripting (XSS) vulnerability in web view's OAuth app form, user authorization prompt web view that can result in Stored XSS on the OAuth Client's name will cause users interacting with it will execute payload. This attack appear to be exploitable via The victim must be tricked to click an opaque link to the web view that runs the XSS payload. A malicious version virtually indistinguishable from a normal link.. This vulnerability appears to have been fixed in 4.2.6, 4.3.0.

Please fix them.

Created: 2018-02-22 Last update: 2019-07-07 09:01

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.4.1 instead of 4.2.0).

Created: 2018-08-26 Last update: 2019-09-29 23:40

news

[rss feed]

[2018-08-27] ruby-doorkeeper 4.4.2-1 MIGRATED to testing (Debian testing watch)
[2018-08-25] Accepted ruby-doorkeeper 4.4.2-1~bpo9+1 (source all) into stretch-backports (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2018-08-25] Accepted ruby-doorkeeper 4.4.2-1 (source) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2018-05-15] Accepted ruby-doorkeeper 4.3.1-1~bpo9+1 (source all) into stretch-backports, stretch-backports (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2018-03-24] ruby-doorkeeper 4.3.1-1 MIGRATED to testing (Debian testing watch)
[2018-03-18] Accepted ruby-doorkeeper 4.3.1-1 (source) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2016-09-07] ruby-doorkeeper 4.2.0-3 MIGRATED to testing (Debian testing watch)
[2016-09-01] Accepted ruby-doorkeeper 4.2.0-3 (source) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2016-08-25] Accepted ruby-doorkeeper 4.2.0-2 (source all) into experimental (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2016-08-23] Accepted ruby-doorkeeper 4.2.0-1 (source all) into experimental (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2016-06-05] ruby-doorkeeper 3.1.0-1 MIGRATED to testing (Debian testing watch)
[2016-05-30] Accepted ruby-doorkeeper 3.1.0-1 (source all) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2015-07-13] ruby-doorkeeper 2.2.1-1 MIGRATED to testing (Britney)
[2015-07-07] Accepted ruby-doorkeeper 2.2.1-1 (source all) into unstable, unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)

bugs [bug history graph]

all: 0

links

homepage
lintian
buildd: logs, clang, reproducibility
popcon
browse source code
edit tags
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 4.4.2-1