-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 15 Oct 2020 20:57:29 +0200 Source: puma Architecture: source Version: 4.3.6-1 Distribution: unstable Urgency: medium Maintainer: Debian Ruby Team <pkg-ruby-extras-maintainers@lists.alioth.debian.org> Changed-By: Daniel Leidert <dleidert@debian.org> Closes: 972102 Changes: puma (4.3.6-1) unstable; urgency=medium . * Team upload. * New upstream version. - Fixes CVE-2020-11076 and CVE-2020-11077 (closes: #972102). * d/copyright: Minor update. * d/puma.lintian-overrides: Add package override. * d/ruby-tests.rake: Add logic to run SSL test. * d/patches/*.patch: Add missing headers and refresh. * d/source/lintian-overrides: Add source override. * d/tests/control: Set environment variable to run the SSL tests separately (similar to the solution used in the jekyll package). * d/tests/test-puma-server-ssl*: Removed. Checksums-Sha1: 5bac4e527e78f149704daf0b11b1bd269bb54c0a 2036 puma_4.3.6-1.dsc 2fab58ecaa913cafd3dce975901c7b43eabc4e9c 242259 puma_4.3.6.orig.tar.gz dd82557f9bc15a65ab909a88a5acd905504c3d51 9508 puma_4.3.6-1.debian.tar.xz ec09f14cc671fb56196e0bb98c7af1ee86075d6d 9318 puma_4.3.6-1_amd64.buildinfo Checksums-Sha256: 472e4364d8d53cf36004f45574b64967d68dbcda3ec5b4f4ab8b4a9f314a2006 2036 puma_4.3.6-1.dsc 7a33d8a03299b920cd1d6c4a4aab04a9b1a964f8cca97deecde282de1c44c446 242259 puma_4.3.6.orig.tar.gz 8ac6ad7b9d0c63cef26873142c12e529ce68cc602c9ffc0c87326711ad94ed1c 9508 puma_4.3.6-1.debian.tar.xz d454450c3d83680fa5f53040033b9db0b68b7c855cd8912dc614700a5bb784fa 9318 puma_4.3.6-1_amd64.buildinfo Files: ac05ee35a385161b28b5b6ba9420162e 2036 web optional puma_4.3.6-1.dsc 058ca8315d58cf8ba0edd70744341c4b 242259 web optional puma_4.3.6.orig.tar.gz 1c0a6755168e9fa228ffd8dbcaf2c34c 9508 web optional puma_4.3.6-1.debian.tar.xz fd77700de90e9c964f32a2100a0e9182 9318 web optional puma_4.3.6-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEvu1N7VVEpMA+KD3HS80FZ8KW0F0FAl+I69IACgkQS80FZ8KW 0F2o4g//Yeh1Py7lFZNXUTNz8u/NH5dhUwJIDF9aHPV4GKMag+UHjBb+nYR/FXfl tsdCZ/2hsLwRXJGlJh9GlqN+uWobYAvN4B7BCY/oZPWB+wyyR3lXeFdX7XzcFn1u e8QFUWWqDYjkhOD2nxa4Dr8lVGlXS2MKHlYSvAkEUJISE0redZzFGvRgN2RVigb/ idf/Y5J72GCPh00QQ4OYfyghEqUF8zfCsxMDjwFL/Xkk/RRsJbtd0k50fkZikK16 Fc4qmBKYQqt5yZ8I+BIeN/cvvZBUwZFkRV9sK9YJrjzXmY+p1xszYF1dAWovNrgB DE//Iwm37Dina9PqrEl+cs5xQIrmJRb7y/wuPbZTeQAwYL6jX6JwLGVEuOtClje0 ZzvVIbJRg/ufTcV0HfH/Ejtzhal561wADA5vgvhx6WHVQNYK6uwcXd8hyzBWMLlI yd3wEJ/YmxupKb8hIDgxoSMTePhblyL1SF+0M0A6Xkx3+hTalmt+caqUL3EOtY1H 6LoVZ1SLVzKnlbHCoQZWPwSLAW3da16gSM3TmjMvXrS86C0BVG2TQ3eW/MATxgbC eaLFgLf5vZN7FOaB8F6Ed1YEQUNureaTpHEZRwe3gay9Tp0v6spnmCxGZuSWFFX7 CF7dKBhFNzK4IZ9Di9G9fs0WtKgktnhefGoktntiaJL8lyMIpnA= =mHDj -----END PGP SIGNATURE-----