Accepted ruby-rack 1.5.2-3+deb8u2 (source all) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 21 Nov 2018 14:21:19 +0100
Source: ruby-rack
Binary: ruby-rack
Built-For-Profiles: nocheck
Architecture: source all
Version: 1.5.2-3+deb8u2
Distribution: jessie-security
Urgency: high
Maintainer: Debian Ruby Extras Maintainers <pkg-ruby-extras-maintainers@lists.alioth.debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Description:
ruby-rack - Modular Ruby webserver interface
Closes: 913005
Changes:
ruby-rack (1.5.2-3+deb8u2) jessie-security; urgency=high
.
* CVE-2018-16471: Prevent a possible XSS vulnerability where a malicious
request could impact the HTTP/HTTPS scheme returned to the underlying
application. (Closes: #913005)
Checksums-Sha1:
3a958fe986fdff46ed4f7306684a1e4ad8f3fa62 2215 ruby-rack_1.5.2-3+deb8u2.dsc
e679e7a3f09007e836f465d70971216fdb4ec7cd 218461 ruby-rack_1.5.2.orig.tar.gz
167c8f1c37745e9e6c40aa5f590cb02043890dc6 7740 ruby-rack_1.5.2-3+deb8u2.debian.tar.xz
091efb1e879515ab7a874981ef6025fae4b3f50b 83634 ruby-rack_1.5.2-3+deb8u2_all.deb
Checksums-Sha256:
cff9315462b6a5c71164c9b5e5eb8bd1ed7a3a09aa9fc9977c7ef4e8ca270c60 2215 ruby-rack_1.5.2-3+deb8u2.dsc
fd4fbd6545f9105baf62b6ea413b62d4724567c608b14de0a3a64568f81cc774 218461 ruby-rack_1.5.2.orig.tar.gz
fd1c4970c2765a9c9020422415eb24c218d76e0bd7be965a5482e3713bf48bcb 7740 ruby-rack_1.5.2-3+deb8u2.debian.tar.xz
6436718c420a9c94185254cfba362e52614f1231e950affba6b4f1e50956b7da 83634 ruby-rack_1.5.2-3+deb8u2_all.deb
Files:
3c9ae764992b53632d8ed98180cc2fb8 2215 ruby optional ruby-rack_1.5.2-3+deb8u2.dsc
84f6d82d041470c5c338ea06d7a01012 218461 ruby optional ruby-rack_1.5.2.orig.tar.gz
1bf37b6e791652b488b30babc8b56651 7740 ruby optional ruby-rack_1.5.2-3+deb8u2.debian.tar.xz
028b943459c50caa0cb732437eb7922d 83634 ruby optional ruby-rack_1.5.2-3+deb8u2_all.deb
-----BEGIN PGP SIGNATURE-----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=iCqX
-----END PGP SIGNATURE-----