[SECURITY] Fedora 22 Update: rubygem-rack-1.6.1-2.fc22

updates at fedoraproject.org updates at fedoraproject.org
Wed Aug 19 08:09:24 UTC 2015


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-12978
2015-08-07 10:05:11
--------------------------------------------------------------------------------

Name        : rubygem-rack
Product     : Fedora 22
Version     : 1.6.1
Release     : 2.fc22
URL         : http://rubyforge.org/projects/rack/
Summary     : Common API for connecting web frameworks, web servers and layers of software
Description :
Rack provides a common API for connecting web frameworks,
web servers and layers of software in between

--------------------------------------------------------------------------------
Update Information:

Fix for CVE-2015-3225: Potential Denial of Service Vulnerability in Rack
- Related rhbz#CVE-2015-3225

New rubygem-rack-1.6.1-1.fc22
--------------------------------------------------------------------------------
ChangeLog:

* Thu Aug  6 2015 Josef Stribny <jstribny at redhat.com> - 1:1.6.1-2
- Fix for CVE-2015-3225: Potential Denial of Service Vulnerability in Rack
  - Related rhbz#CVE-2015-3225
* Tue Jun  2 2015 Steve Traylen <jstribny at redhat.com> - 1:1.6.1-1
- Update to 1.6.1
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1232292 - CVE-2015-3225 rubygem-rack: Potential Denial of Service Vulnerability in Rack normalize_params()
        https://bugzilla.redhat.com/show_bug.cgi?id=1232292
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update rubygem-rack' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list