ruby-rack-session (2.1.1-0.1ubuntu0.26.04.1) resolute-security; urgency=medium

  * SECURITY UPDATE: Acceptance of unencrypted cookie when decryption fails.
    - debian/patches/CVE-2026-39324.patch: Add encryptors.empty? check in
      lib/rack/session/cookie.rb. Add tests in test/spec_session_cookie.rb.
    - CVE-2026-39324

 -- Hlib Korzhynskyy <hlib.korzhynskyy@canonical.com>  Mon, 27 Apr 2026 15:16:20 -0230

ruby-rack-session (2.1.1-0.1build1) resolute; urgency=medium

  * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)

 -- Sebastien Bacher <seb128@debian.org>  Mon, 02 Feb 2026 21:39:41 +0100

ruby-rack-session (2.1.1-0.1) unstable; urgency=medium

  * Non-maintainer upload.
  * New upstream version 2.1.1. (Closes: #1104928, CVE-2025-46336)

 -- Bastian Germann <bage@debian.org>  Tue, 15 Jul 2025 13:10:44 +0200

ruby-rack-session (2.1.0-1) unstable; urgency=medium

  * New upstream version 2.1.0.

 -- Utkarsh Gupta <utkarsh@debian.org>  Sat, 08 Mar 2025 20:40:24 +0530

ruby-rack-session (2.0.0-3) unstable; urgency=medium

  * Add patch to avoid using relative require to lib/.

 -- Utkarsh Gupta <utkarsh@debian.org>  Thu, 30 Jan 2025 12:35:05 +0100

ruby-rack-session (2.0.0-2) unstable; urgency=medium

  * Re-upload to unstable with Rack 3. (Closes: #1027350)
  * Add myself as an uploader, too.

 -- Utkarsh Gupta <utkarsh@debian.org>  Tue, 28 Jan 2025 17:41:49 +0100

ruby-rack-session (2.0.0-1+exp1) experimental; urgency=medium

  * Upload to experimental

 -- Cédric Boutillier <boutil@debian.org>  Thu, 09 Jan 2025 10:54:33 +0100

ruby-rack-session (2.0.0-1) unstable; urgency=medium

  * New upstream release.
  * d/copyright: update upstream copyright.
  * d/copyright: update years of the packaging copyright.
  * Declare compliance with Debian Policy 4.6.2.

 -- Lucas Kanashiro <kanashiro@debian.org>  Tue, 27 Jun 2023 18:41:52 -0300

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog ruby-rack-session`.
