Debian Package Tracker - ruby-omniauth

general

source: ruby-omniauth (main)
version: 1.8.1-1
maintainer: Debian Ruby Extras Maintainers (archive) (DMD)
uploaders: Pirate Praveen [DMD]
arch: all
std-ver: 4.1.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1.2.1-1+deb8u1
o-o-sec: 1.2.1-1+deb8u1
oldstable: 1.3.1-1+deb9u1
old-sec: 1.3.1-1+deb9u1
old-bpo: 1.8.1-1~bpo9+1
stable: 1.8.1-1
testing: 1.8.1-1
unstable: 1.8.1-1

versioned links

1.2.1-1+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.3.1-1+deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.8.1-1~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.8.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

ruby-omniauth

action needed

A new upstream version is available: 1.9.0 high

A new upstream version 1.9.0 is available, you should consider packaging it.

Created: 2018-12-17 Last update: 2019-10-16 17:42

1 security issue in buster high

There is 1 open security issue in buster.

1 important issue:

CVE-2015-9284: The request phase of the OmniAuth Ruby gem is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able to sign into the web application as the primary account.

Please fix it.

Created: 2019-05-11 Last update: 2019-07-07 09:00

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2015-9284: The request phase of the OmniAuth Ruby gem is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able to sign into the web application as the primary account.

Please fix it.

Created: 2019-05-11 Last update: 2019-07-07 09:00

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2015-9284: The request phase of the OmniAuth Ruby gem is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able to sign into the web application as the primary account.

Please fix it.

Created: 2019-07-07 Last update: 2019-07-07 09:00

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 1.8.1-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 94c55272a3583564f66690d732608a56d6f1d67b
Author: Utkarsh Gupta <guptautkarsh2102@gmail.com>
Date:   Tue Aug 13 06:14:49 2019 +0530

    Update d/ch

commit 970603e45d4f662a61b3e78331aabf72ffe3c0f4
Author: Utkarsh Gupta <guptautkarsh2102@gmail.com>
Date:   Tue Aug 13 06:14:49 2019 +0530

    Add salsa-ci.yml

Created: 2019-08-13 Last update: 2019-10-12 18:19

1 ignored security issue in jessie low

There is 1 open security issue in jessie.

1 issue skipped by the security teams:

CVE-2015-9284: The request phase of the OmniAuth Ruby gem is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able to sign into the web application as the primary account.

Please fix it.

Created: 2019-05-11 Last update: 2019-07-07 09:00

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2015-9284: The request phase of the OmniAuth Ruby gem is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able to sign into the web application as the primary account.

Please fix it.

Created: 2019-05-11 Last update: 2019-07-07 09:00

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.4.1 instead of 4.1.4).

Created: 2018-08-20 Last update: 2019-09-29 23:40

news

[rss feed]

[2018-05-22] Accepted ruby-omniauth 1.8.1-1~bpo9+1 (source all) into stretch-backports, stretch-backports (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2018-04-30] ruby-omniauth 1.8.1-1 MIGRATED to testing (Debian testing watch)
[2018-04-25] Accepted ruby-omniauth 1.8.1-1 (source) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2018-02-27] ruby-omniauth 1.6.1-2 MIGRATED to testing (Debian testing watch)
[2018-02-22] Accepted ruby-omniauth 1.6.1-2 (source) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2018-02-10] Accepted ruby-omniauth 1.2.1-1+deb8u1 (source all) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Pirate Praveen) (signed by: Luciano Bello)
[2018-02-10] Accepted ruby-omniauth 1.3.1-1+deb9u1 (source all) into proposed-updates->stable-new, proposed-updates (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2018-02-02] ruby-omniauth 1.3.1-2 MIGRATED to testing (Debian testing watch)
[2018-01-31] Accepted ruby-omniauth 1.3.1-2 (source) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2017-07-24] Accepted ruby-omniauth 1.6.1-1 (source) into experimental (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2016-03-18] ruby-omniauth 1.3.1-1 MIGRATED to testing (Debian testing watch)
[2016-03-12] Accepted ruby-omniauth 1.3.1-1 (source) into unstable (Rahulkrishnan R A) (signed by: Praveen Arimbrathodiyil)
[2015-07-21] ruby-omniauth 1.2.2-3 MIGRATED to testing (Britney)
[2015-07-15] Accepted ruby-omniauth 1.2.2-3 (source all) into unstable (Antonio Terceiro)
[2015-05-03] ruby-omniauth 1.2.2-2 MIGRATED to testing (Britney)
[2015-04-27] Accepted ruby-omniauth 1.2.2-2 (source all) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2014-11-20] Accepted ruby-omniauth 1.2.2-1 (source all) into experimental (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2014-05-18] ruby-omniauth 1.2.1-1 MIGRATED to testing (Debian testing watch)
[2014-05-07] Accepted ruby-omniauth 1.2.1-1 (source all) (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2014-04-30] Accepted ruby-omniauth 1.1.4-2 (source all) (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2013-05-05] ruby-omniauth 1.1.4-1 MIGRATED to testing (Debian testing watch)
[2013-04-19] Accepted ruby-omniauth 1.1.4-1 (source all) (Ondřej Surý)

bugs [bug history graph]

all: 0

links

homepage
lintian
buildd: logs, clang, reproducibility
popcon
browse source code
edit tags
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.8.1-1