-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 02 Jan 2021 18:18:03 +0530 Source: ruby-faye Architecture: source Version: 1.4.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Ruby Team <pkg-ruby-extras-maintainers@lists.alioth.debian.org> Changed-By: Utkarsh Gupta <utkarsh@debian.org> Closes: 959392 967063 Changes: ruby-faye (1.4.0-1) unstable; urgency=medium . [ Utkarsh Gupta ] * Add salsa-ci.yml . [ Debian Janitor ] * Bump debhelper from old 11 to 12. * Set debhelper-compat version in Build-Depends. * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository, Repository-Browse. * Update standards version to 4.4.1, no changes needed. * Update standards version to 4.5.0, no changes needed. . [ Utkarsh Gupta ] * New upstream version 1.4.0 - Address em-http-request warnings about `verify_peer`. (Fixes: CVE-2020-15134) (Closes: #967063) - Strict meta channel recognition in server. (Fixes: CVE-2020-11020) (Closes: #959392) * Tighten dependency on ruby-{faye-websocket, em-http-request} * Add patch to relax em-http-request dependency * Fix package wrt cme * Use @d.o address * Drop unnecessary dependency on ruby interpreter Checksums-Sha1: 9d6f0f43b9a37ecd540d9dbd423c5b306283a7bf 2152 ruby-faye_1.4.0-1.dsc 87080a8eb6e4a1c1616246689e5b19d231cc9989 336457 ruby-faye_1.4.0.orig.tar.gz bbd55a8dc3067b00dc4b4725404f99be03ba01c6 2624 ruby-faye_1.4.0-1.debian.tar.xz bc07d32fa0a8b81c578791f44da56e26093a43b5 9488 ruby-faye_1.4.0-1_amd64.buildinfo Checksums-Sha256: 1eb63ab6b206fe3c8c35c6a0320640c6b0402fdd1103cc29e50cd339c6679898 2152 ruby-faye_1.4.0-1.dsc 89abad0f6499c615bdde6e7f8bfa57fc16803b722d736ce72f851fac83ff84b2 336457 ruby-faye_1.4.0.orig.tar.gz 1afced9a683889c7f25041e79b8a9ad245cc2509a0d0f662588217310fc991bf 2624 ruby-faye_1.4.0-1.debian.tar.xz 41a38e7cf436caf8cc27bcff2d308c39b47dc6ce247c636a967c02775488275c 9488 ruby-faye_1.4.0-1_amd64.buildinfo Files: 02d040e9e5fe8c5a2ef3900effe31ae1 2152 ruby optional ruby-faye_1.4.0-1.dsc 619dd7c6df49b207b874798cdca2f9df 336457 ruby optional ruby-faye_1.4.0.orig.tar.gz cb8e1236a4b2f369f66f7383b33475a6 2624 ruby optional ruby-faye_1.4.0-1.debian.tar.xz deac3a94493e151f18bc9fc857a15af8 9488 ruby optional ruby-faye_1.4.0-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCAAxFiEEbJ0QSEqa5Mw4X3xxgj6WdgbDS5YFAl/wb4cTHHV0a2Fyc2hA ZGViaWFuLm9yZwAKCRCCPpZ2BsNLlsTfD/0WnX8IraqGyGGiPFaLhhao+PhFDjZa R+9Zze0Mi1r3aA9mQru7nrJML1lXjLaiE8IFqDcH05RVW1wq8MnKGxamhI0cAucc T9e1melkr96qlLPB0ynOuHmigGlDvdhiYGeGP+OdagYga50pvYsw75C8mbud23+g fz3ixae+zJgVg+VyGivCtr0dpo//jwY9dkq8iDhqco6novsmd+rkymv/x3lLZlYD 1BwuUA7g4YPq1NCKj+1j/ZRREKAKPbMzqYO9QvPbLqYx4RDdc0Cqi9CIztVDlqdW 8m1M7acpeDQYOiolypNC0mRK0JAKn2fsXxF3BCA3wX08XjteYYzVqXiKwrBasVFY fSM5axjJr16GKh4VT8T2Omkbx9uiFzzuaZZiKxG66q8spXPiCnlXvpp7+simUAsy 4+h+liPFO2qI9cOyPmR6G454qEeOicMV3GL130MbUBz1xslBZwJDz4iRh528qOdF 8e7Ihl+EnJY0d7yL0YwOEL6IQm3BS+PGSDZkU3CtKU+eBNbizFTTsOaB6sc2QmrJ 9I5WCJ1qAPTdsiQRZmqcBABWIgvt0jzM4lRho5phM+NunTNVrrIADdnWk7ir3ZQU Ab0z72ArH+uT8bO5kyQPxA5Ps6HMQJ39ezT254cVwTrapmVA2M5lyDrvugbhDaQ9 hRkQH8B7aXntdg== =oyoS -----END PGP SIGNATURE-----