Debian Package Tracker - ruby-rails-html-sanitizer

general

source: ruby-rails-html-sanitizer (main)
version: 1.0.4-1
maintainer: Debian Ruby Extras Maintainers (archive) (DMD)
uploaders: Balasankar C [DMD] – Georg Faerber [DMD]
arch: all
std-ver: 4.1.3
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 1.0.3-2
stable: 1.0.4-1
testing: 1.0.4-1
unstable: 1.0.4-1

versioned links

1.0.3-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.0.4-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

ruby-rails-html-sanitizer

action needed

Problems while searching for a new upstream version high

uscan had problems while searching for a new upstream version:

redirecting DEPRECATED pkg-ruby-extras.alioth.debian.org/cgi-bin/gemwatch to gemwatch.debian.net

Created: 2018-05-06 Last update: 2019-12-15 18:07

A new upstream version is available: 1.3.0 high

A new upstream version 1.3.0 is available, you should consider packaging it.

Created: 2019-08-08 Last update: 2019-12-15 18:07

1 security issue in stretch high

There is 1 open security issue in stretch.

1 important issue:

CVE-2018-3741: There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.

Please fix it.

Created: 2018-03-25 Last update: 2019-10-21 00:30

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 1.0.4-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 41466757ce85003c0e9c986de234dbec07e7fba7
Author: Utkarsh Gupta <guptautkarsh2102@gmail.com>
Date:   Tue Aug 13 06:59:11 2019 +0530

    Update d/ch

commit 11b4691c3817eda43f7365039acafb14f9b9373c
Author: Utkarsh Gupta <guptautkarsh2102@gmail.com>
Date:   Tue Aug 13 06:59:11 2019 +0530

    Add salsa-ci.yml

Created: 2019-08-13 Last update: 2019-12-15 08:56

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.4.1 instead of 4.1.3).

Created: 2018-04-16 Last update: 2019-09-29 23:39

news

[rss feed]

[2018-03-29] ruby-rails-html-sanitizer 1.0.4-1 MIGRATED to testing (Debian testing watch)
[2018-03-23] Accepted ruby-rails-html-sanitizer 1.0.4-1 (source) into unstable (Georg Faerber) (signed by: Cédric Boutillier)
[2016-03-10] ruby-rails-html-sanitizer 1.0.3-2 MIGRATED to testing (Debian testing watch)
[2016-03-05] Accepted ruby-rails-html-sanitizer 1.0.3-2 (source) into unstable (Christian Hofstaedtler)
[2016-01-29] ruby-rails-html-sanitizer 1.0.3-1 MIGRATED to testing (Debian testing watch)
[2016-01-26] Accepted ruby-rails-html-sanitizer 1.0.3-1 (source) into unstable (Antonio Terceiro)
[2015-07-14] ruby-rails-html-sanitizer 1.0.2-1 MIGRATED to testing (Britney)
[2015-07-08] Accepted ruby-rails-html-sanitizer 1.0.2-1 (source all) into unstable, unstable (Balasankar C) (signed by: Praveen Arimbrathodiyil)

bugs [bug history graph]

all: 0

links

homepage
lintian
buildd: logs, clang, reproducibility
popcon
browse source code
edit tags
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.0.4-1