Debian Package Tracker

general

source: ruby-oauth (main)
version: 0.5.4-1
maintainer: Debian Ruby Extras Maintainers (archive) (DMD)
uploaders: Taku YASUI [DMD]
arch: all
std-ver: 4.3.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.4.7-2
oldstable: 0.4.7-3
old-bpo: 0.5.3-1~bpo9+1
stable: 0.5.4-1
testing: 0.5.4-1
unstable: 0.5.4-1

versioned links

0.4.7-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.4.7-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.5.3-1~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.5.4-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

ruby-oauth

action needed

1 security issue in stretch high

There is 1 open security issue in stretch.

1 important issue:

CVE-2016-11086: lib/oauth/consumer.rb in the oauth-ruby gem through 0.5.4 for Ruby does not verify server X.509 certificates if a certificate bundle cannot be found, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information.

Please fix it.

Created: 2020-09-25 Last update: 2020-09-26 07:05

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2016-11086: lib/oauth/consumer.rb in the oauth-ruby gem through 0.5.4 for Ruby does not verify server X.509 certificates if a certificate bundle cannot be found, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information.

Please fix it.

Created: 2020-09-25 Last update: 2020-09-26 07:05

1 security issue in buster high

There is 1 open security issue in buster.

1 important issue:

CVE-2016-11086: lib/oauth/consumer.rb in the oauth-ruby gem through 0.5.4 for Ruby does not verify server X.509 certificates if a certificate bundle cannot be found, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information.

Please fix it.

Created: 2020-09-25 Last update: 2020-09-26 07:05

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2016-11086: lib/oauth/consumer.rb in the oauth-ruby gem through 0.5.4 for Ruby does not verify server X.509 certificates if a certificate bundle cannot be found, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information.

Please fix it.

Created: 2020-09-25 Last update: 2020-09-26 07:05

Multiarch hinter reports 1 issue(s) normal

There are issues with the multiarch metadata for this package.

ruby-oauth could have its dependency on ruby annotated with :any

Created: 2016-11-13 Last update: 2020-10-30 23:36

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 0.5.4-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 5dcc9b9e2cc18db2beb53fa5b1c84c1a164d4586
Author: Cédric Boutillier <boutil@debian.org>
Date:   Thu Sep 3 20:33:11 2020 +0000

    [ci skip] Add .gitattributes to keep unwanted files out of the source package

commit dc727238dd0e81b1fef9439bb5c6e81cc7dc656d
Author: Cédric Boutillier <boutil@debian.org>
Date:   Tue Sep 1 14:00:40 2020 +0000

    [ci skip] Update team name

commit 01023470db04866b8af5976895314604e1645157
Merge: 129a4cf cb6149d
Author: Utkarsh Gupta <guptautkarsh2102@gmail.com>
Date:   Sun Dec 22 21:36:34 2019 +0000

    Merge branch 'lintian-fixes' into 'master'
    
    Fix some issues reported by lintian
    
    See merge request ruby-team/ruby-oauth!1

commit cb6149dc8b5aa904d9f96bb97e95541ed4d873e9
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Wed Dec 11 00:33:07 2019 +0000

    Update standards version to 4.4.1, no changes needed.
    
    Fixes lintian: out-of-date-standards-version
    See https://lintian.debian.org/tags/out-of-date-standards-version.html for more details.

commit 2017641c120fa32b8cbc543ce4d65d4ea27e3f28
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Wed Dec 11 00:32:46 2019 +0000

    Set upstream metadata fields: Bug-Database, Repository, Repository-Browse.
    
    Fixes lintian: upstream-metadata-file-is-missing
    See https://lintian.debian.org/tags/upstream-metadata-file-is-missing.html for more details.

commit 1fc8089bd64f2ead63648360e62dfb7d2ad10547
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Wed Dec 11 00:32:19 2019 +0000

    Set debhelper-compat version in Build-Depends.
    
    Fixes lintian: uses-debhelper-compat-file
    See https://lintian.debian.org/tags/uses-debhelper-compat-file.html for more details.

commit 53988e372dd68dabfc3499352685be54ebab8340
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Wed Dec 11 00:32:00 2019 +0000

    Bump debhelper from old 9 to 12.
    
    Fixes lintian: package-uses-old-debhelper-compat-version
    See https://lintian.debian.org/tags/package-uses-old-debhelper-compat-version.html for more details.

commit 09fb1496618bce0965963ba99b9e1c34492c289e
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Wed Dec 11 00:31:40 2019 +0000

    Use secure copyright file specification URI.
    
    Fixes lintian: insecure-copyright-format-uri
    See https://lintian.debian.org/tags/insecure-copyright-format-uri.html for more details.

commit 129a4cf2ec0d9ece69c46ed1e89f69cdc6e55105
Author: Utkarsh Gupta <guptautkarsh2102@gmail.com>
Date:   Tue Aug 13 06:13:48 2019 +0530

    Update d/ch

commit facc00104ece5eab7cb87016917c6216fe29fdd2
Author: Utkarsh Gupta <guptautkarsh2102@gmail.com>
Date:   Tue Aug 13 06:13:48 2019 +0530

    Add salsa-ci.yml

commit 47bed973b78eef63ea5cc6df697d4df2424f36b2
Author: Michael Moll <Michael Moll kvedulv@kvedulv.de>
Date:   Mon Jan 7 17:53:55 2019 +0100

    use HTTPS for watch URL

Created: 2019-01-05 Last update: 2020-10-23 17:36

lintian reports 1 warning normal

Lintian reports 1 warning about this package. You should make the package lintian clean getting rid of them.

Created: 2020-07-29 Last update: 2020-08-22 06:06

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.5.0 instead of 4.3.0).

Created: 2019-07-08 Last update: 2020-01-21 05:06

news

[rss feed]

[2019-01-10] ruby-oauth 0.5.4-1 MIGRATED to testing (Debian testing watch)
[2019-01-07] Accepted ruby-oauth 0.5.4-1 (source all) into unstable (Michael Moll) (signed by: Lucas Kanashiro)
[2018-05-18] Accepted ruby-oauth 0.5.3-1~bpo9+1 (source all) into stretch-backports, stretch-backports (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2017-07-17] ruby-oauth 0.5.3-1 MIGRATED to testing (Debian testing watch)
[2017-07-11] Accepted ruby-oauth 0.5.3-1 (source) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2015-07-15] ruby-oauth 0.4.7-3 MIGRATED to testing (Britney)
[2015-07-09] Accepted ruby-oauth 0.4.7-3 (source all) into unstable (Cédric Boutillier)
[2014-05-16] ruby-oauth 0.4.7-2 MIGRATED to testing (Debian testing watch)
[2014-05-05] Accepted ruby-oauth 0.4.7-2 (source all) (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2013-08-26] ruby-oauth 0.4.7-1 MIGRATED to testing (Debian testing watch)
[2013-08-15] Accepted ruby-oauth 0.4.7-1 (source all) (Taku YASUI)
[2012-07-11] ruby-oauth 0.4.6-2 MIGRATED to testing (Debian testing watch)
[2012-06-30] Accepted ruby-oauth 0.4.6-2 (source all) (Cédric Boutillier) (signed by: Vincent Fourmond)
[2012-05-16] ruby-oauth 0.4.6-1 MIGRATED to testing (Debian testing watch)
[2012-05-06] Accepted ruby-oauth 0.4.6-1 (source all) (Taku YASUI)
[2012-04-22] ruby-oauth 0.4.5-2 MIGRATED to testing (Debian testing watch)
[2012-04-11] Accepted ruby-oauth 0.4.5-2 (source all) (Taku YASUI)

bugs [bug history graph]

all: 1
RC: 0
I&N: 1
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (0, 1)
buildd: logs, clang, reproducibility
popcon
browse source code
edit tags
other distros
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 0.5.4-1