Ubuntu
ruby-rack package

ruby-rack 2.2.4-3ubuntu0.1 source package in Ubuntu

Changelog

ruby-rack (2.2.4-3ubuntu0.1) mantic-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2023-27539.patch: avoid ReDos
      in lib/rack/request.rb.
    - CVE-2023-27539
  * SECURITY UPDATE: Denial of service
    - debian/parches/CVE-2024-26141.patch: return an empty array
      when ranges are too large in lib/rack/utils.rb.
    - CVE-2024-26141
  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2024-26146.patch: Fixing ReDoS in header parsing
      in lib/rack/utils.rb.
    - CVE-2024-26146

 -- Leonidas Da Silva Barbosa <email address hidden>  Tue, 05 Mar 2024 13:42:47 -0300

Upload details

Uploaded by:
Leonidas S. Barbosa
Uploaded to:
Mantic
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
ruby
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Mantic updates main ruby
Mantic security main ruby

Builds

Mantic: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
ruby-rack_2.2.4.orig.tar.gz 272.1 KiB 62263ff6b757b205060accb37a1e204d49a4e1c45728254d612cb75470bec5ad
ruby-rack_2.2.4-3ubuntu0.1.debian.tar.xz 11.4 KiB 07bbcb54a96d9045cd9beb987db1fdeceaf947196418e38445311c7e3a985ff0
ruby-rack_2.2.4-3ubuntu0.1.dsc 2.4 KiB aa1d5d8e76d5cc32efe771bfe7108550185ca7144c6fd0c9ed522958ceebac62

View changes file

Binary packages built by this source

ruby-rack: modular Ruby webserver interface

 Rack provides a minimal, modular and adaptable interface for developing
 web applications in Ruby. By wrapping HTTP requests and responses in
 the simplest way possible, it unifies and distills the API for web
 servers, web frameworks, and software in between (the so-called
 middleware) into a single method call.
 .
 Also see http://rack.github.io/.