File rubygem-rack-1_1.changes of Package rubygem-rack-1_1
------------------------------------------------------------------- Mon Feb 11 08:19:08 UTC 2013 - adrian@suse.com - updated to version 1.1.6 * Fix CVE-2013-0263, timing attack against Rack::Session::Cookie * Fix CVE-2013-0262, symlink path traversal in Rack::File - from 1.1.5: * [SEC] Rack::Auth::AbstractRequest no longer symbolizes arbitrary strings * Fixed erroneous test case in the 1.3.x series ------------------------------------------------------------------- Wed Jan 9 09:57:54 UTC 2013 - adrian@suse.de - update to version 1.1.4 ------------------------------------------------------------------- Sat May 12 19:28:26 UTC 2012 - mrueckert@suse.de - provide the single digit name too ------------------------------------------------------------------- Fri Jun 17 14:11:39 UTC 2011 - mrueckert@suse.de - initial package of the 1.1 branch (1.1.2)