Ubuntu
ruby-rack package

ruby-rack 1.6.4-4ubuntu0.2 source package in Ubuntu

Changelog

ruby-rack (1.6.4-4ubuntu0.2) bionic-security; urgency=medium

  * Merge patches from Debian.
  * SECURITY UPDATE: Directory traversal vulnerability.
    - debian/patches/CVE-2020-8161.patch: Use Dir.entries instead of
      Dir[glob] to prevent user-specified glob metacharacters.
    - CVE-2020-8161
  * SECURITY UPDATE: Cookie forgery.
    - debian/patches/CVE-2020-8184.patch: When parsing cookies, only
      decode the values.
    - CVE-2020-8184

 -- Eduardo Barretto <email address hidden>  Wed, 30 Sep 2020 12:08:48 -0300

Upload details

Uploaded by:
Eduardo Barretto
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
ruby
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Bionic updates universe ruby
Bionic security universe ruby

Builds

Bionic: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
ruby-rack_1.6.4.orig.tar.gz 226.8 KiB ceee5dd5aa0b0e2f765085e7dc378dab993bb80632974ad753e606547c6babd0
ruby-rack_1.6.4-4ubuntu0.2.debian.tar.xz 8.0 KiB e307a2945d0b0f2654fd45851bb64779e2b13cd7a6b41a78100d8347ec7f6616
ruby-rack_1.6.4-4ubuntu0.2.dsc 2.3 KiB 1b39c9526356953db43c4e99d22f25cdb54f3b87b838850a774a5f1e5a6082af

View changes file

Binary packages built by this source

ruby-rack: modular Ruby webserver interface

 Rack provides a minimal, modular and adaptable interface for developing
 web applications in Ruby. By wrapping HTTP requests and responses in
 the simplest way possible, it unifies and distills the API for web
 servers, web frameworks, and software in between (the so-called
 middleware) into a single method call.
 .
 Also see http://rack.github.io/.