| ID | 163451 |
| Package Name | rubygem-rack |
| Links |
Fedora Package Sources |
Fedora Official Koji Buildsystem |
Rocks RISC-V Koji Buildsystem |
Fedora RISC-V GitHub |
Old Koji Buildsystem
|
| Version | 3.1.16 |
| Release | 2.fc43 |
| Epoch | 1 |
Draft | False |
| Source | git+https://src.fedoraproject.org/rpms/rubygem-rack.git#ba2c1e9df00b95e4272db53b6a5bfe06244cde0d |
| Summary |
| Description |
| Built by | kojiadmin |
| State |
complete
|
| Volume |
DEFAULT |
| Started | Sat, 08 Nov 2025 20:03:52 CST |
| Completed | Sat, 08 Nov 2025 20:30:15 CST |
| Task | build (f43, /rpms/rubygem-rack.git:ba2c1e9df00b95e4272db53b6a5bfe06244cde0d) |
| Extra | {'source': {'original_url': 'git+https://src.fedoraproject.org/rpms/rubygem-rack.git#ba2c1e9df00b95e4272db53b6a5bfe06244cde0d'}} |
| Tags |
|
| RPMs |
|
| Logs |
|
| Changelog |
* Fri Jul 25 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1:3.1.16-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Thu Jul 10 2025 Vít Ondruch <vondruch@redhat.com> - 1:3.1.16-1
- Update to Rack 3.1.16
Resolves: rhbz#2124662
- Denial of service in Content-Disposition parsing (CVE-2022-44571)
Resolves: rhbz#2164714
Resolves: rhbz#2164716
- Denial of service in Content-Disposition parsing (CVE-2022-44570)
Resolves: rhbz#2164719
Resolves: rhbz#2164721
- Denial of service in Content-Disposition parsing (CVE-2022-44572)
Resolves: rhbz#2164722
Resolves: rhbz#2164724
- Denial of service in Multipart MIME parsing (CVE-2023-27530)
Resolves: rhbz#2176477
Resolves: rhbz#2176478
- Denial of service in header parsing (CVE-2023-27539)
Resolves: rhbz#2179649
Resolves: rhbz#2179651
- Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
Resolves: rhbz#2265593
- Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
Resolves: rhbz#2265594
- Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
Resolves: rhbz#2265595
- Possible Log Injection in Rack::CommonLogger (CVE-2025-25184)
Resolves: rhbz#2345301
- Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection (CVE-2025-27111)
Resolves: rhbz#2349810
- File Inclusion in Rack::Static (CVE-2025-27610)
Resolves: rhbz#2351231
- Unbounded-Parameter DoS in Rack::QueryParser (CVE-2025-46727)
Resolves: rhbz#2364966
- Rack Session Reuse Vulnerability (CVE-2025-32441). Current version
actually extracts the affected code into rack-session package.
Resolves: rhbz#2364965
* Sat Jan 18 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1:2.2.4-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Wed Nov 20 2024 Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:2.2.4-8
- Backport upstream patch for ruby34 hash formatting change
- Add dependency for rubygem(base64) explicitly
* Wed Sep 04 2024 Miroslav Suchý <msuchy@redhat.com> - 1:2.2.4-7
- convert license to SPDX
* Fri Jul 19 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1:2.2.4-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Fri Jan 26 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1:2.2.4-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Mon Sep 18 2023 Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:2.2.4-4
- Backport upstream patch for Regexp.new 3rd argument deprecation
(needed for ruby 3.3)
|