Accepted ruby-rack 2.0.6-3+deb10u1 (source) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 27 Aug 2022 12:16:16 +0530
Source: ruby-rack
Architecture: source
Version: 2.0.6-3+deb10u1
Distribution: buster-security
Urgency: medium
Maintainer: Debian Ruby Extras Maintainers <pkg-ruby-extras-maintainers@lists.alioth.debian.org>
Changed-By: Utkarsh Gupta <utkarsh@debian.org>
Changes:
ruby-rack (2.0.6-3+deb10u1) buster-security; urgency=medium
.
* Non-maintainer upload by the LTS team.
* CVE-2022-30122: Prevent a Denial of Service (DoS) vulnerability in the HTTP
multipart parsing.
* CVE-2022-30123: Prevent a potential shell escape sequence injection
vulnerability caused through the logging system.
Checksums-Sha1:
8286f2ffafbd1abb3329a7d98f3f969873194320 2276 ruby-rack_2.0.6-3+deb10u1.dsc
bef6a13d81a8000634ea30dae30cb906d7a71f91 253423 ruby-rack_2.0.6.orig.tar.gz
3e6a0390a306e4d220138a1acdd08f8893520d74 8228 ruby-rack_2.0.6-3+deb10u1.debian.tar.xz
fa40762b2aeab831b645c1dae4e78ddafe6b866c 14069 ruby-rack_2.0.6-3+deb10u1_source.buildinfo
Checksums-Sha256:
dd6eb64f42577da5767352f308a76cc9a624765a8c1fb50250fa4dd58ac1c94a 2276 ruby-rack_2.0.6-3+deb10u1.dsc
62c3a92e98a61fcb5423ff7f46726a17e48930c4ccc817daaaa93e9038922c5a 253423 ruby-rack_2.0.6.orig.tar.gz
b291640215434e321867c565edac0bc5e5b4f71dc47f78a54a7c052325e178f4 8228 ruby-rack_2.0.6-3+deb10u1.debian.tar.xz
32d1a431d7f788780303140c10e5dc6e3e2f2ba95be0815a676c03e6fb37efd7 14069 ruby-rack_2.0.6-3+deb10u1_source.buildinfo
Files:
1bb4017099e9151e31c35df6fe1f71c2 2276 ruby optional ruby-rack_2.0.6-3+deb10u1.dsc
a089f87b15056562ce44645965ddbc97 253423 ruby optional ruby-rack_2.0.6.orig.tar.gz
7599c65bdb5cc406f3adc551ffed3fa2 8228 ruby optional ruby-rack_2.0.6-3+deb10u1.debian.tar.xz
f1706c24190ac3fcbeb387efe3b9c14f 14069 ruby optional ruby-rack_2.0.6-3+deb10u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJHBAEBCAAxFiEEbJ0QSEqa5Mw4X3xxgj6WdgbDS5YFAmMTjd8THHV0a2Fyc2hA
ZGViaWFuLm9yZwAKCRCCPpZ2BsNLljTbD/43MeO2Gk2grWi7lcx8/VtVI6pySzZ4
jcSU7VsvvKP/18x50MTEXRYP2RoChBA3ZqD91MUEFzPRh07+RkcM6F28O3T22XwF
c1TrvsRsBHvYKYLbHGenmRNXhDYZfHQZtJkm/ZjOrwU6hVX72tpTqbnLGipkfKIo
kGsiMsVrBrE1DDLN2L1KX6zZWje6CDxZOGPtamS+fCPrGVetRt/JWXORvuF+aYNc
KoCHX1M706VQOK4i+PUr1OollRN/RiNRso5OWX8mk3VmDW1DdZQG81lNubXLUUwQ
6hH1zRl7i4gMrKIng2k5U6cOXZm50eC9DTMCfBdQFQMH8RtYX83kHao780NH0/BB
QzI+0AK87RGmLsupw9rj+Q6x7n/r8BSm03Wn4GQPJxpIaoWoYw3/hufkJYYGlozN
0PGnDQ57IdebnHHgFCRAarlMbnbqtFRAuLSSrXiigliLCTsvx7ENxE8miTX/iHcv
0kRnSD30KoaXdG1kDLb+xHNr9FIOdxo7c0Z/wFSZuEBVIFxry6p+fvKAIDyTI5FV
OdHGa7UQrJsnZHhoDwR+P54k6Z/zYNOEfKiNErNjbScqkq8dZGV0mvEP7rFGz72a
UG1Ht0dkn+IF5D/TKe8jGyxOu4ffH1I4xjqqAtZLcCwYFDuov45TUv2jWoihZLm6
RIZ/Ph6nkEVg9g==
=buj7
-----END PGP SIGNATURE-----
Reply to: