diff --git a/rack-3.1.12.gem b/rack-3.1.12.gem new file mode 100644 index 0000000..363a0f0 --- /dev/null +++ b/rack-3.1.12.gem @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:00d83055c89273eb13679ab562767b8826955aa6c4371d7d161deb975c50c540 +size 112128 diff --git a/rack-3.1.8.gem b/rack-3.1.8.gem deleted file mode 100644 index 293bc78..0000000 --- a/rack-3.1.8.gem +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:d3fbcbca43dc2b43c9c6d7dfbac01667ae58643c42cea10013d0da970218a1b1 -size 111616 diff --git a/rubygem-rack.changes b/rubygem-rack.changes index aad880d..e4d835d 100644 --- a/rubygem-rack.changes +++ b/rubygem-rack.changes @@ -1,3 +1,24 @@ +------------------------------------------------------------------- +Tue Mar 11 10:32:49 UTC 2025 - Aleksei Burlakov + +- New upstream release 3.1.12, see bundled CHANGELOG.md +- removed patches + fix CVE-2025-25184 [bsc#1237141], Rack::CommonLogger can be exploited by crafting input + - rubygem-rack-CVE-2025-25184.patch + fix CVE-2025-27111 [bsc#1238607], Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection + - rubygem-rack-CVE-2025-27111.patch + + +------------------------------------------------------------------- +Sun Mar 9 11:30:48 UTC 2025 - Aleksei Burlakov + +- security update +- added patches + fix CVE-2025-25184 [bsc#1237141], Rack::CommonLogger can be exploited by crafting input + + rubygem-rack-CVE-2025-25184.patch + fix CVE-2025-27111 [bsc#1238607], Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection + + rubygem-rack-CVE-2025-27111.patch + ------------------------------------------------------------------- Mon Nov 4 17:17:57 UTC 2024 - Dan Čermák diff --git a/rubygem-rack.spec b/rubygem-rack.spec index 112570c..fe51e57 100644 --- a/rubygem-rack.spec +++ b/rubygem-rack.spec @@ -1,7 +1,7 @@ # # spec file for package rubygem-rack # -# Copyright (c) 2024 SUSE LLC +# Copyright (c) 2025 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -24,7 +24,7 @@ # Name: rubygem-rack -Version: 3.1.8 +Version: 3.1.12 Release: 0 %define mod_name rack %define mod_full_name %{mod_name}-%{version}