-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 20 Nov 2013 16:19:46 -0300 Source: gem2deb Binary: gem2deb Architecture: source all Version: 0.5.1 Distribution: unstable Urgency: low Maintainer: Debian Ruby Extras Maintainers <pkg-ruby-extras-maintainers@lists.alioth.debian.org> Changed-By: Antonio Terceiro <terceiro@debian.org> Description: gem2deb - Debian Ruby packaging suite Closes: 729981 Changes: gem2deb (0.5.1) unstable; urgency=low . * Don't interpolate arguments for shell commands. This fixes handling of files with weird characters in their names such as ")" and whitespace in general, and improves security against maliciously-crafted filenames which could inject unwanted shell commands in the system that is building a package with gem2deb. (Closes: #729981) Checksums-Sha1: 833435fd0b35c26f75275db257bd326dc50d9fe7 1899 gem2deb_0.5.1.dsc 821721e97e767c15880a18063b0ff5744bf57d9d 59304 gem2deb_0.5.1.tar.gz 263cc3884fef0a1e6dbe278b656ff01677742db6 44018 gem2deb_0.5.1_all.deb Checksums-Sha256: 449dbf75104de07b0341e8c6d1384f2429150169cf405367b8c4f017833ad720 1899 gem2deb_0.5.1.dsc db037234d2f2640adb0a5b29a5c6e040dae03b1b91b6031ad84adb51776b6d93 59304 gem2deb_0.5.1.tar.gz 6f076bfae59fba5ab6a1f8fa7752947076342cad11f60a7e303b361d31db3201 44018 gem2deb_0.5.1_all.deb Files: 44ef452a19c165b3a0da3ef6f022d218 1899 ruby optional gem2deb_0.5.1.dsc d498b8dddcb0b7a73cd227f17a406b6b 59304 ruby optional gem2deb_0.5.1.tar.gz 6487fba61607379c7484ad41e5c9786a 44018 ruby optional gem2deb_0.5.1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (GNU/Linux) iQIcBAEBCAAGBQJSjko7AAoJEPwNsbvNRgveM3IQAMi1d4BL5gR3a72huprcPWnQ 4HCi/aTV5Xu6mUSkGkH/3mWRqdXtjfiIZzfMGs6CMqHwTPNcarTPcvuLrkNTlN5G H18Nrie3I5rW2fHZ8ylczr+hcQzhEeCexysmrPLTwOtD1SuZWM7tnmyTP9pYlc4t 35Nkm12eUV4YAzt2WluDWrUPCBry9AQ2j1f/NLah5Ez1PhwPDBx/nuB5Y8uph8Ss DtZuHD8Ys1eEDk3oVHehBm24YW2HlmeaS9udOa9h+JyzzHkBdUbXG8bCr+0ueTkk oE29/3IT24OK0F5qg9M1Kh5M28lbqR5Yvd+nMcf2sMSlwUBw/wX/081xluea9+W0 fnWZ7oCxz2odaxRuDHzW/VLNsgw77+uNRHXlZfAaZ7RvDZoaS5hEz6/J3drr6Pw8 FUk6cUSYJFze/MnLBo/zgAASHzy67eUkm4w/dIvasoyORyb062p9S09svGbG+qkV s5Sxn0nWZS/Z+YTQ+vEs+OGDfq47Am+d6J3QKHQdlHCe+BQynoTrshFfu3hss6Yx szIQbKpHoGX+F+9TajVwEoHa0WsUAiK3JxN3RIvZu4uvi6OIBynhambAZaKgLOe0 SS7PlV2Y6qj9OTGJyCaLkCGNGo3xAyqxhVV1KNyzFclLxj2WrwEaJMz94BitQUHK rBzYuD1BvB2Zvzj3uM5e =K+Xd -----END PGP SIGNATURE-----