| ID | 207541 |
| Package Name | rubygem-rack |
| Links |
Fedora Package Sources |
Fedora Official Koji Buildsystem |
Rocks RISC-V Koji Buildsystem |
Fedora RISC-V GitHub |
Old Koji Buildsystem
|
| Version | 3.2.3 |
| Release | 3.fc44 |
| Epoch | 1 |
Draft | False |
| Source | git+https://src.fedoraproject.org/rpms/rubygem-rack.git#12edee6086e656ffe83b17763449a51a16e534fc |
| Summary |
| Description |
| Built by | liuyang |
| State |
complete
|
| Volume |
DEFAULT |
| Started | Wed, 22 Apr 2026 13:33:32 CST |
| Completed | Wed, 22 Apr 2026 14:23:44 CST |
| Task | build (f44, /rpms/rubygem-rack.git:12edee6086e656ffe83b17763449a51a16e534fc) |
| Extra | {'source': {'original_url': 'git+https://src.fedoraproject.org/rpms/rubygem-rack.git#12edee6086e656ffe83b17763449a51a16e534fc'}} |
| Tags |
|
| RPMs |
|
| Logs |
|
| Changelog |
* Thu Nov 06 2025 Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:3.2.3-3
- Add BR: rubygem(logger) for ruby3_5
* Mon Oct 13 2025 Vít Ondruch <vondruch@redhat.com> - 1:3.2.3-1
- Update to Rack 3.2.3
Resolves: rhbz#2385295
- Rack QueryParser has an unsafe default allowing params_limit bypass via
semicolon-separated parameters (CVE-2025-59830)
- Unbounded read in `Rack::Request` form parsing can lead to memory exhaustion
(CVE-2025-61919)
- Improper handling of headers in `Rack::Sendfile` may allow proxy bypass
(CVE-2025-61780)
* Fri Jul 25 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1:3.1.16-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Thu Jul 10 2025 Vít Ondruch <vondruch@redhat.com> - 1:3.1.16-1
- Update to Rack 3.1.16
Resolves: rhbz#2124662
- Denial of service in Content-Disposition parsing (CVE-2022-44571)
Resolves: rhbz#2164714
Resolves: rhbz#2164716
- Denial of service in Content-Disposition parsing (CVE-2022-44570)
Resolves: rhbz#2164719
Resolves: rhbz#2164721
- Denial of service in Content-Disposition parsing (CVE-2022-44572)
Resolves: rhbz#2164722
Resolves: rhbz#2164724
- Denial of service in Multipart MIME parsing (CVE-2023-27530)
Resolves: rhbz#2176477
Resolves: rhbz#2176478
- Denial of service in header parsing (CVE-2023-27539)
Resolves: rhbz#2179649
Resolves: rhbz#2179651
- Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
Resolves: rhbz#2265593
- Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
Resolves: rhbz#2265594
- Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
Resolves: rhbz#2265595
- Possible Log Injection in Rack::CommonLogger (CVE-2025-25184)
Resolves: rhbz#2345301
- Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection (CVE-2025-27111)
Resolves: rhbz#2349810
- File Inclusion in Rack::Static (CVE-2025-27610)
Resolves: rhbz#2351231
- Unbounded-Parameter DoS in Rack::QueryParser (CVE-2025-46727)
Resolves: rhbz#2364966
- Rack Session Reuse Vulnerability (CVE-2025-32441). Current version
actually extracts the affected code into rack-session package.
Resolves: rhbz#2364965
* Sat Jan 18 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1:2.2.4-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Wed Nov 20 2024 Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:2.2.4-8
- Backport upstream patch for ruby34 hash formatting change
- Add dependency for rubygem(base64) explicitly
* Wed Sep 04 2024 Miroslav Suchý <msuchy@redhat.com> - 1:2.2.4-7
- convert license to SPDX
* Fri Jul 19 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1:2.2.4-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Fri Jan 26 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1:2.2.4-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
|