------------------------------------------------------------------- Sat Oct 1 04:40:47 UTC 2016 - coolo@suse.com - updated to version 1.0.3 see installed CHANGELOG.md ## 1.0.3 (2016-09-30) - Treat comma as normal character in HTTP::Cookie.cookie_value_to_hash instead of key-value pair separator. This should fix the problem described in CVE-2016-7401. ------------------------------------------------------------------- Fri Sep 13 11:06:22 UTC 2013 - coolo@suse.com - updated to version 1.0.2 - Fix HTTP::Cookie.parse so that it does not raise ArgumentError when it finds a bad name or value that is parsable but considered invalid. ------------------------------------------------------------------- Fri May 24 08:37:46 UTC 2013 - coolo@suse.com - initial package