Change logs for ruby-rack source package in Saucy

  • ruby-rack (1.5.2-1) unstable; urgency=low
    
    
      * Team upload.
    
      [ Cédric Boutillier ]
      * debian/control: remove obsolete DM-Upload-Allowed flag
      * use canonical URI in Vcs-* fields
    
      [ Christian Hofstaedtler ]
      * New upstream release.
      * Removed all patches, already applied upstream.
    
     -- Christian Hofstaedtler <email address hidden>  Mon, 03 Jun 2013 15:56:09 +0200
  • ruby-rack (1.4.1-2.1) unstable; urgency=high
    
    
      [ KURASHIKI Satoru ]
      * Non-maintainer upload.
      * Create cherry-picked patches for Security Fix (Closes: #700173 #700226).
        - CVE-2013-0262: 0004-Prevent-symlink-path-traversals.patch
        - CVE-2013-0263: 0005-Use-secure_compare-for-hmac-comparison.patch
    
      [ Youhei SASAKI ]
      * Create cherry-picked patches for Security Fix (Closes: #698440).
        - CVE-2012-6109: 0001-Fix-parsing-performance-for-unquoted-filenames.patch
        - CVE-2013-0183: 0002-multipart-parser-avoid-unbounded-gets-method.patch
        - CVE-2013-0184: 0003-Reimplement-auth-scheme-fix.patch
    
     -- KURASHIKI Satoru <email address hidden>  Wed, 20 Feb 2013 20:56:31 +0900
  • ruby-rack (1.4.1-2) unstable; urgency=low
    
    
      * Bump build dependency on gem2deb to >= 0.3.0~
    
     -- Antonio Terceiro <email address hidden>  Mon, 25 Jun 2012 15:07:51 -0300