[ubuntu/wily-proposed] ruby2.1 2.1.5-4ubuntu1 (Accepted)

Tue Sep 8 20:39:15 UTC 2015

ruby2.1 (2.1.5-4ubuntu1) wily; urgency=medium

  * Merge with Debian; remaining changes:
    - Upstream doesn't support Tcl/Tk 8.6, stop building the extension.

ruby2.1 (2.1.5-4) unstable; urgency=medium

  * debian/control: point Vcs-Git: to master-2.1 branch
  * Apply upstream patches to fix Request hijacking vulnerability in Rubygems
    [CVE-2015-3900] (Closes: #790119)

ruby2.1 (2.1.5-3) unstable; urgency=high

  * Fix vulnerabiity with overly permissive matching of hostnames in OpenSSL
    extension [CVE-2015-1855]
    - applied revision 50296 of upstream svn repository.

ruby2.1 (2.1.5-2) unstable; urgency=medium

  * Fix Segmentation fault after pack & ioctl & unpack (Closes: #781504)
    - apply r44804 from upstream svn
  * debian/upstream-changes: simpler and more accurate implementation

ruby2.1 (2.1.5-1) unstable; urgency=medium

  * New upstream release
    - Fixes CVE-2014-8090 Another Denial of Service XML Expansion
      (Closes: #770932)
    - Fixes build on SPARC (Closes: #769731)

ruby2.1 (2.1.4-1) unstable; urgency=high

  * New upstream version
    - CVE-2014-8080: Denial of Service in XML Expansion
    - Changes default settings in OpenSSL bindings to not use deprecated and
      insecure ciphers; avoids issues associated to CVE-2014-3566 (i.e. the
      "POODLE" bug in OpenSSL)

ruby2.1 (2.1.3-2) unstable; urgency=medium

  [ Sebastian Boehm ]
  * Install SystemTap tap file (Closes: #765862)

ruby2.1 (2.1.3-1) unstable; urgency=medium

  * New upstream version

ruby2.1 (2.1.2-4) unstable; urgency=medium

  [ Antonio Terceiro ]
  * Move libjs-jquery dependency from libruby2.1 to ruby2.1, and turn it into
    Recommends:. This way programs that link against libruby2.1 won't pull in
    libjs-jquery; OTOH those using rdoc (and thus needing libjs-jquery) would
    be already using ruby2.1 anyway.

  [ Christian Hofstaedtler ]
  * Update Vcs-Git URL, as we've moved from master2.1 to master.
  * Prepare libruby21.symbols for x32 (Closes: #759615)
  * Remove embedded copies of SSL certificates. Rubygems is advised by
    rubygems-integration to use the ca-certificates provided certificates.
    (Closes: #689074)

ruby2.1 (2.1.2-3) unstable; urgency=medium

  [ Antonio Terceiro ]
  * debian/rules: call debian/split-tk-out.rb with $(baseruby) instead of
    `ruby` to actually support bootstrapping with ruby1.8 (and no `ruby`)
  * Break dependency loop (Closes: #747858)
    - ruby2.1: drop dependency on ruby
    - libruby2.1: drop dependency on ruby2.1

  [ Christian Hofstaedtler ]
  * Add missing man pages for gem, rdoc, testrb (Closes: #756053, #756815)
  * Correct ruby2.1's Multi-Arch flag to 'allowed' (Closes: #745360)

Date: Tue, 08 Sep 2015 21:23:42 +0200
Changed-By: Matthias Klose <doko at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/ruby2.1/2.1.5-4ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 08 Sep 2015 21:23:42 +0200
Source: ruby2.1
Binary: ruby2.1 libruby2.1 ruby2.1-dev ruby2.1-doc
Architecture: source
Version: 2.1.5-4ubuntu1
Distribution: wily
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Matthias Klose <doko at ubuntu.com>
Description:
 libruby2.1 - Libraries necessary to run Ruby 2.1
 ruby2.1    - Interpreter of object-oriented scripting language Ruby
 ruby2.1-dev - Header files for compiling extension modules for the Ruby 2.1
 ruby2.1-doc - Documentation for Ruby 2.1
Closes: 689074 745360 747858 756053 756815 759615 765862 769731 770932 781504 790119
Changes:
 ruby2.1 (2.1.5-4ubuntu1) wily; urgency=medium
 .
   * Merge with Debian; remaining changes:
     - Upstream doesn't support Tcl/Tk 8.6, stop building the extension.
 .
 ruby2.1 (2.1.5-4) unstable; urgency=medium
 .
   * debian/control: point Vcs-Git: to master-2.1 branch
   * Apply upstream patches to fix Request hijacking vulnerability in Rubygems
     [CVE-2015-3900] (Closes: #790119)
 .
 ruby2.1 (2.1.5-3) unstable; urgency=high
 .
   * Fix vulnerabiity with overly permissive matching of hostnames in OpenSSL
     extension [CVE-2015-1855]
     - applied revision 50296 of upstream svn repository.
 .
 ruby2.1 (2.1.5-2) unstable; urgency=medium
 .
   * Fix Segmentation fault after pack & ioctl & unpack (Closes: #781504)
     - apply r44804 from upstream svn
   * debian/upstream-changes: simpler and more accurate implementation
 .
 ruby2.1 (2.1.5-1) unstable; urgency=medium
 .
   * New upstream release
     - Fixes CVE-2014-8090 Another Denial of Service XML Expansion
       (Closes: #770932)
     - Fixes build on SPARC (Closes: #769731)
 .
 ruby2.1 (2.1.4-1) unstable; urgency=high
 .
   * New upstream version
     - CVE-2014-8080: Denial of Service in XML Expansion
     - Changes default settings in OpenSSL bindings to not use deprecated and
       insecure ciphers; avoids issues associated to CVE-2014-3566 (i.e. the
       "POODLE" bug in OpenSSL)
 .
 ruby2.1 (2.1.3-2) unstable; urgency=medium
 .
   [ Sebastian Boehm ]
   * Install SystemTap tap file (Closes: #765862)
 .
 ruby2.1 (2.1.3-1) unstable; urgency=medium
 .
   * New upstream version
 .
 ruby2.1 (2.1.2-4) unstable; urgency=medium
 .
   [ Antonio Terceiro ]
   * Move libjs-jquery dependency from libruby2.1 to ruby2.1, and turn it into
     Recommends:. This way programs that link against libruby2.1 won't pull in
     libjs-jquery; OTOH those using rdoc (and thus needing libjs-jquery) would
     be already using ruby2.1 anyway.
 .
   [ Christian Hofstaedtler ]
   * Update Vcs-Git URL, as we've moved from master2.1 to master.
   * Prepare libruby21.symbols for x32 (Closes: #759615)
   * Remove embedded copies of SSL certificates. Rubygems is advised by
     rubygems-integration to use the ca-certificates provided certificates.
     (Closes: #689074)
 .
 ruby2.1 (2.1.2-3) unstable; urgency=medium
 .
   [ Antonio Terceiro ]
   * debian/rules: call debian/split-tk-out.rb with $(baseruby) instead of
     `ruby` to actually support bootstrapping with ruby1.8 (and no `ruby`)
   * Break dependency loop (Closes: #747858)
     - ruby2.1: drop dependency on ruby
     - libruby2.1: drop dependency on ruby2.1
 .
   [ Christian Hofstaedtler ]
   * Add missing man pages for gem, rdoc, testrb (Closes: #756053, #756815)
   * Correct ruby2.1's Multi-Arch flag to 'allowed' (Closes: #745360)
Checksums-Sha1:
 55473fa7c553fbbdd17c081b36d21d707417ad69 2450 ruby2.1_2.1.5-4ubuntu1.dsc
 4c70a84f0e88f553235b3e0c2619c193251d4652 8026484 ruby2.1_2.1.5.orig.tar.xz
 6f9eac0e4d883b92cd435a4c25050a4eba71e2ec 88912 ruby2.1_2.1.5-4ubuntu1.debian.tar.xz
Checksums-Sha256:
 1da2b4453cc3708ed525ca81db786bd3b970f7b17dfcb8eff3042035a1974d09 2450 ruby2.1_2.1.5-4ubuntu1.dsc
 0f8d9b15b38ee8b9a59dd9504404789cd8941da2c3ea079535e24f95e0f7ddc1 8026484 ruby2.1_2.1.5.orig.tar.xz
 fd25de5f25d9986c18db583a1cde201468b28c0b0e8a31b5296564ce68256772 88912 ruby2.1_2.1.5-4ubuntu1.debian.tar.xz
Files:
 8fba9f7701c017d3a03d1bc4ba33950e 2450 ruby extra ruby2.1_2.1.5-4ubuntu1.dsc
 1fe7f8fe73a3deba9363f391c1083e94 8026484 ruby extra ruby2.1_2.1.5.orig.tar.xz
 e91b26fbc235ab8f390b3086e8a0375e 88912 ruby extra ruby2.1_2.1.5-4ubuntu1.debian.tar.xz
Original-Maintainer: Antonio Terceiro <terceiro at debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=X8/e
-----END PGP SIGNATURE-----