Register | Log in

ruby-omniauth

flexible authentication system utilizing Rack middleware

Choose email to subscribe with

general

source: ruby-omniauth (main)
version: 2.1.0-1
maintainer: Debian Ruby Team (archive) (DMD)
uploaders: Pirate Praveen [DMD] – Utkarsh Gupta [DMD]
arch: all
std-ver: 4.6.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1.3.1-1+deb9u1
o-o-sec: 1.3.1-1+deb9u1
o-o-bpo: 1.8.1-1~bpo9+1
oldstable: 1.8.1-1
old-bpo: 1.9.1-1~bpo10+1
stable: 1.9.1-1
testing: 2.1.0-1
unstable: 2.1.0-1

versioned links

1.3.1-1+deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.8.1-1~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.8.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.9.1-1~bpo10+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.9.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.1.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

ruby-omniauth (1 bugs: 0, 1, 0, 0)

action needed

2 security issues in sid high

There are 2 open security issues in sid.

2 important issues:

CVE-2015-9284: The request phase of the OmniAuth Ruby gem (1.9.1 and earlier) is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able to sign into the web application as the primary account.
CVE-2020-36599: lib/omniauth/failure_endpoint.rb in OmniAuth before 1.9.2 (and before 2.0) does not escape the message_key value.

Created: 2022-07-04 Last update: 2022-10-28 06:08

2 security issues in buster high

There are 2 open security issues in buster.

1 important issue:

CVE-2020-36599: lib/omniauth/failure_endpoint.rb in OmniAuth before 1.9.2 (and before 2.0) does not escape the message_key value.

1 ignored issue:

CVE-2015-9284: The request phase of the OmniAuth Ruby gem (1.9.1 and earlier) is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able to sign into the web application as the primary account.

Created: 2022-08-19 Last update: 2022-10-28 06:08

2 security issues in bullseye high

There are 2 open security issues in bullseye.

1 important issue:

CVE-2020-36599: lib/omniauth/failure_endpoint.rb in OmniAuth before 1.9.2 (and before 2.0) does not escape the message_key value.

1 ignored issue:

CVE-2015-9284: The request phase of the OmniAuth Ruby gem (1.9.1 and earlier) is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able to sign into the web application as the primary account.

Created: 2022-07-04 Last update: 2022-10-28 06:08

2 security issues in bookworm high

There are 2 open security issues in bookworm.

2 important issues:

CVE-2015-9284: The request phase of the OmniAuth Ruby gem (1.9.1 and earlier) is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able to sign into the web application as the primary account.
CVE-2020-36599: lib/omniauth/failure_endpoint.rb in OmniAuth before 1.9.2 (and before 2.0) does not escape the message_key value.

Created: 2022-07-04 Last update: 2022-10-28 06:08

4 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 1bf20206e1d1fdfabc627042461fce6f92dde459
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Fri Oct 28 05:46:39 2022 +0000

    Remove obsolete fields Contact, Name from debian/upstream/metadata (already present in machine-readable debian/copyright).
    
    Changes-By: lintian-brush

commit 5b2b124a463e112fca4c857031e16b05ab607ae5
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Fri Oct 28 05:46:39 2022 +0000

    Set upstream metadata fields: Security-Contact.
    
    Changes-By: lintian-brush

commit 679823ce47aa5943d4c553c0544602c5eff55371
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Fri Oct 28 05:46:34 2022 +0000

    Set field Upstream-Contact in debian/copyright.
    
    Changes-By: lintian-brush

commit fcaba9901e645716e8f3de1cad4ba6a9666e4a86
Author: Pirate Praveen <praveen@debian.org>
Date:   Mon Oct 24 17:13:01 2022 +0530

    Update minimum version of ruby-rack to 2.2.3

Created: 2022-10-24 Last update: 2022-12-02 10:06

lintian reports 1 warning normal

Lintian reports 1 warning about this package. You should make the package lintian clean getting rid of them.

Created: 2022-10-29 Last update: 2022-10-29 14:38

news

[2022-10-28] ruby-omniauth 2.1.0-1 MIGRATED to testing (Debian testing watch)
[2022-10-24] Accepted ruby-omniauth 2.1.0-1 (source) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2022-09-10] ruby-omniauth 2.0.4-2 MIGRATED to testing (Debian testing watch)
[2022-09-08] Accepted ruby-omniauth 2.0.4-2 (source) into unstable (Antonio Terceiro)
[2022-09-07] Accepted ruby-omniauth 2.0.4-1 (source) into experimental (Antonio Terceiro)
[2021-06-10] Accepted ruby-omniauth 2.0.4-1~exp1 (source) into experimental (Antonio Terceiro)
[2020-09-15] Accepted ruby-omniauth 1.9.1-1~bpo10+1 (source all) into buster-backports (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2020-04-02] ruby-omniauth 1.9.1-1 MIGRATED to testing (Debian testing watch)
[2020-03-29] Accepted ruby-omniauth 1.9.1-1 (source) into unstable (Utkarsh Gupta)
[2019-12-31] Accepted ruby-omniauth 1.9.0-1~bpo10+1 (source all) into buster-backports, buster-backports (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2019-12-27] ruby-omniauth 1.9.0-1 MIGRATED to testing (Debian testing watch)
[2019-12-24] Accepted ruby-omniauth 1.9.0-1 (source) into unstable (Samyak Jain) (signed by: Praveen Arimbrathodiyil)
[2018-05-22] Accepted ruby-omniauth 1.8.1-1~bpo9+1 (source all) into stretch-backports, stretch-backports (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2018-04-30] ruby-omniauth 1.8.1-1 MIGRATED to testing (Debian testing watch)
[2018-04-25] Accepted ruby-omniauth 1.8.1-1 (source) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2018-02-27] ruby-omniauth 1.6.1-2 MIGRATED to testing (Debian testing watch)
[2018-02-22] Accepted ruby-omniauth 1.6.1-2 (source) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2018-02-10] Accepted ruby-omniauth 1.2.1-1+deb8u1 (source all) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Pirate Praveen) (signed by: Luciano Bello)
[2018-02-10] Accepted ruby-omniauth 1.3.1-1+deb9u1 (source all) into proposed-updates->stable-new, proposed-updates (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2018-02-02] ruby-omniauth 1.3.1-2 MIGRATED to testing (Debian testing watch)
[2018-01-31] Accepted ruby-omniauth 1.3.1-2 (source) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2017-07-24] Accepted ruby-omniauth 1.6.1-1 (source) into experimental (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2016-03-18] ruby-omniauth 1.3.1-1 MIGRATED to testing (Debian testing watch)
[2016-03-12] Accepted ruby-omniauth 1.3.1-1 (source) into unstable (Rahulkrishnan R A) (signed by: Praveen Arimbrathodiyil)
[2015-07-21] ruby-omniauth 1.2.2-3 MIGRATED to testing (Britney)
[2015-07-15] Accepted ruby-omniauth 1.2.2-3 (source all) into unstable (Antonio Terceiro)
[2015-05-03] ruby-omniauth 1.2.2-2 MIGRATED to testing (Britney)
[2015-04-27] Accepted ruby-omniauth 1.2.2-2 (source all) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2014-11-20] Accepted ruby-omniauth 1.2.2-1 (source all) into experimental (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2014-05-18] ruby-omniauth 1.2.1-1 MIGRATED to testing (Debian testing watch)

1
2

bugs [bug history graph]

all: 1
RC: 0
I&N: 1
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (0, 1)
buildd: logs, reproducibility
popcon
browse source code
edit tags
other distros
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.9.1-1

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing