Publishing details

• Published on 2024-06-17
• Copied from ubuntu mantic in PPA for Ubuntu Security Proposed by Marc Deslauriers

Changelog

ruby-rack (2.2.4-3ubuntu0.2) mantic-security; urgency=medium

  * SECURITY UPDATE: DoS in Multipart MIME parsing code
    - debian/patches/CVE-2023-27530.patch: limit all multipart parts, not
      just files in README.rdoc, lib/rack/multipart/parser.rb,
      lib/rack/utils.rb, test/spec_multipart.rb, test/spec_request.rb.
    - CVE-2023-27530
  * SECURITY UPDATE: DoS via crafted content type headers
    - debian/patches/CVE-2024-25126.patch: avoid 2nd degree polynomial
      regexp in MediaType in lib/rack/media_type.rb.
    - CVE-2024-25126

 -- Marc Deslauriers <email address hidden>  Fri, 14 Jun 2024 13:20:04 -0400

Builds

• amd64

Built packages

• ruby-rack modular Ruby webserver interface

Package files

• ruby-rack_2.2.4-3ubuntu0.2.debian.tar.xz (14.0 KiB)
• ruby-rack_2.2.4-3ubuntu0.2.dsc (2.4 KiB)
• ruby-rack_2.2.4-3ubuntu0.2_all.deb (111.5 KiB)
• ruby-rack_2.2.4.orig.tar.gz (272.1 KiB)