On തി, Jan 20, 2020 at 12:37, Cédric Boutillier <boutil@debian.org> wrote:
Hi,I have just uploaded ruby-rack-cors 1.1.1 to experimental to fix #944849(CVE-2019-18978). Please test gitlab and diaspora and see if it is suitable for an upload to unstable.
This is a breaking change and we need to update rack and rails with it. https://gitlab.com/gitlab-org/gitlab/merge_requests/22274 https://github.com/rack/rack/issues/1432
Cheers, Cédric