Accepted ruby-sinatra 2.0.5-4+deb10u2 (source all) into oldstable
- To: debian-lts-changes@lists.debian.org, dispatch@tracker.debian.org
- Subject: Accepted ruby-sinatra 2.0.5-4+deb10u2 (source all) into oldstable
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Tue, 10 Jan 2023 15:50:30 +0000
- Debian: DAK
- Debian-architecture: source all
- Debian-archive-action: accept
- Debian-changes: ruby-sinatra_2.0.5-4+deb10u2_amd64.changes
- Debian-source: ruby-sinatra
- Debian-suite: oldstable
- Debian-version: 2.0.5-4+deb10u2
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.seger; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=zsBmEo/UmzlVh6BpergLSVImQAwpKNpvWv4AEU7pjPs=; b=sPm60I0z1TI56wgjwpUownNIuv MdUpd70noUdZN7/ucrHe+xvljdBzJU3+4FOa3diJCLscNmPD7/BKKRl9bw04WUPoxDi7hpbLxky73 9t8ewzJaJYp37HWBrqy6D/UlY4IdSeULzDd2vplt2UZVfgcCSlPHv63FORqoRK3AnhnZSM5NTXQ0Y m0WZJFItuFQEkAlsHj1ylcStuY3rgNBtfFVYhHEVlPiaMsQnRL3yzv9KJz4fV9ShREJ1lo6xAacOn mdUeSbPuPZAJING5o+LQsDWupwQAmzcUZ5WGYeqYJTfCsSm6sOsATvBuen/1Ck8/b/VAIxP5ZZ3E5 whIr10mw==;
- Mail-followup-to: debian-lts@lists.debian.org
- Message-id: <E1pFGtS-001QcW-2z@seger.debian.org>
- Reply-to: debian-lts@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 10 Jan 2023 15:35:29 +0000
Source: ruby-sinatra
Binary: ruby-rack-protection ruby-sinatra ruby-sinatra-contrib
Architecture: source all
Version: 2.0.5-4+deb10u2
Distribution: buster-security
Urgency: high
Maintainer: Debian Ruby Extras Maintainers <pkg-ruby-extras-maintainers@lists.alioth.debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Description:
ruby-rack-protection - Protects against typical web attacks for Rack apps
ruby-sinatra - Ruby web-development dressed in a DSL
ruby-sinatra-contrib - collection of useful extensions to the Sinatra web framework
Closes: 1025125
Changes:
ruby-sinatra (2.0.5-4+deb10u2) buster-security; urgency=high
.
* Non-maintainer upload by the LTS security team.
- Remove existing debian/gbp.conf.
- Add debian/.gitlab-ci.yml and disable piuparts testing.
* CVE-2022-45442: Fix a reflected file download (RFD) attack in the
Content-Disposition HTTP header which was being incorrectly derived from a
potentially user-supplied filename. (Closes: #1025125)
Checksums-Sha1:
7f9344aae500a475dc9daeae7b5358c8df889b4b 2974 ruby-sinatra_2.0.5-4+deb10u2.dsc
6cd71a285b77eaaf6fb84df61dd6ce7685c929cc 490580 ruby-sinatra_2.0.5.orig.tar.gz
c138a5e591883007f4129d06d0d5d2df5cd176f7 8264 ruby-sinatra_2.0.5-4+deb10u2.debian.tar.xz
33a3c71cac169702797b71f7c5d834d0a1981b21 36768 ruby-rack-protection_2.0.5-4+deb10u2_all.deb
4c43f56792f37d4987660e77548dbf823bb3b5c9 50972 ruby-sinatra-contrib_2.0.5-4+deb10u2_all.deb
5dd97e679e843a5486a8512780de089c7ddb1b83 337604 ruby-sinatra_2.0.5-4+deb10u2_all.deb
deea0ddb9c815d22c0dfaaffd35d0ee0c85f09f5 12219 ruby-sinatra_2.0.5-4+deb10u2_amd64.buildinfo
Checksums-Sha256:
2afcf35e6a1d328fe3419f0fc4847becf250f9f3ba0399faa871c70b88a37d9d 2974 ruby-sinatra_2.0.5-4+deb10u2.dsc
423c9d6cbbc89e53652c390a9908927058c30952bfdf19c5b083bfce2890fe8a 490580 ruby-sinatra_2.0.5.orig.tar.gz
89b246c4eef1e2aa5543c6b1490be752cd2d52cf461b70b2a7493cd0b1c67c2e 8264 ruby-sinatra_2.0.5-4+deb10u2.debian.tar.xz
eaf4d5d76025fdc1753daab51a52c27361755d3e9ee04fb86a449e05cb08ffc7 36768 ruby-rack-protection_2.0.5-4+deb10u2_all.deb
82057341b2e356e5b04dd55655bc38bd0375c9298c818888dbdbb1d2a0cbdd60 50972 ruby-sinatra-contrib_2.0.5-4+deb10u2_all.deb
b087d1b3c7aa73349868d3c6d85b1e5590e3b8b3deaadd8f818c99260fe06dbb 337604 ruby-sinatra_2.0.5-4+deb10u2_all.deb
ef6e3b7a43950d2eeb008c051e6cdbc5d0c1dcbade1b3846fac2c50d99e6f54a 12219 ruby-sinatra_2.0.5-4+deb10u2_amd64.buildinfo
Files:
f521ef1f750d66d714be623763e82192 2974 ruby optional ruby-sinatra_2.0.5-4+deb10u2.dsc
02263f5234d50fede1f50c102123d702 490580 ruby optional ruby-sinatra_2.0.5.orig.tar.gz
46a890520ab3c48cccd49dfe155d44a3 8264 ruby optional ruby-sinatra_2.0.5-4+deb10u2.debian.tar.xz
2de251555be12c3b643b737423d56095 36768 ruby optional ruby-rack-protection_2.0.5-4+deb10u2_all.deb
0a70070d2f85ea82fffb791bc9a88b22 50972 ruby optional ruby-sinatra-contrib_2.0.5-4+deb10u2_all.deb
4087e732c5f279806618f47beb7262c0 337604 ruby optional ruby-sinatra_2.0.5-4+deb10u2_all.deb
bd494ef98090c3e644134887e1159b7c 12219 ruby optional ruby-sinatra_2.0.5-4+deb10u2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=oLyl
-----END PGP SIGNATURE-----