Sat, 07 Nov 2026 04:47:40 UTC Log in

rubygem-rack-3.2.3-7.fc45

complete
A modular Ruby webserver interface built by guoguo completed Sat, 17 Oct 2026 21:27:11 UTC
Task 83327

Description

Rack provides a minimal, modular and adaptable interface for developing web applications in Ruby. By wrapping HTTP requests and responses in the simplest way possible, it unifies and distills the API for web servers, web frameworks, and software in between (the so-called middleware) into a single method call.

RPMs

3 files, 2 arches
src
  • rubygem-rack-3.2.3-7.fc45.src.rpm 265.09 KB info · download
noarch
  • rubygem-rack-3.2.3-7.fc45.noarch.rpm 86.26 KB info · download
  • rubygem-rack-doc-3.2.3-7.fc45.noarch.rpm 324.09 KB info · download

Logs

noarch

Changelog

* Fri Jul 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 1:3.2.3-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild

* Thu Apr 23 2026 Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:3.2.3-6
- Add upstream PR for Minitest 6.0.5 compatibility

* Sat Jan 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 1:3.2.3-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild

* Wed Jan 07 2026 Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:3.2.3-4
- Use minitest-global_expectations

* Thu Nov 06 2025 Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:3.2.3-3
- Add BR: rubygem(logger) for ruby3_5

* Mon Oct 13 2025 Vít Ondruch <vondruch@redhat.com> - 1:3.2.3-1
- Update to Rack 3.2.3
  Resolves: rhbz#2385295
- Rack QueryParser has an unsafe default allowing params_limit bypass via
  semicolon-separated parameters (CVE-2025-59830)
- Unbounded read in `Rack::Request` form parsing can lead to memory exhaustion
  (CVE-2025-61919)
- Improper handling of headers in `Rack::Sendfile` may allow proxy bypass
  (CVE-2025-61780)

* Fri Jul 25 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1:3.1.16-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild

* Thu Jul 10 2025 Vít Ondruch <vondruch@redhat.com> - 1:3.1.16-1
- Update to Rack 3.1.16
  Resolves: rhbz#2124662
- Denial of service in Content-Disposition parsing (CVE-2022-44571)
  Resolves: rhbz#2164714
  Resolves: rhbz#2164716
- Denial of service in Content-Disposition parsing (CVE-2022-44570)
  Resolves: rhbz#2164719
  Resolves: rhbz#2164721
- Denial of service in Content-Disposition parsing (CVE-2022-44572)
  Resolves: rhbz#2164722
  Resolves: rhbz#2164724
- Denial of service in Multipart MIME parsing (CVE-2023-27530)
  Resolves: rhbz#2176477
  Resolves: rhbz#2176478
- Denial of service in header parsing (CVE-2023-27539)
  Resolves: rhbz#2179649
  Resolves: rhbz#2179651
- Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
  Resolves: rhbz#2265593
- Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
  Resolves: rhbz#2265594
- Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
  Resolves: rhbz#2265595
- Possible Log Injection in Rack::CommonLogger (CVE-2025-25184)
  Resolves: rhbz#2345301
- Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection (CVE-2025-27111)
  Resolves: rhbz#2349810
- File Inclusion in Rack::Static (CVE-2025-27610)
  Resolves: rhbz#2351231
- Unbounded-Parameter DoS in Rack::QueryParser (CVE-2025-46727)
  Resolves: rhbz#2364966
- Rack Session Reuse Vulnerability (CVE-2025-32441). Current version
  actually extracts the affected code into rack-session package.
  Resolves: rhbz#2364965

* Sat Jan 18 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1:2.2.4-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild

* Wed Nov 20 2024 Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:2.2.4-8
- Backport upstream patch for ruby34 hash formatting change
- Add dependency for rubygem(base64) explicitly

* Wed Sep 04 2024 Miroslav Suchý <msuchy@redhat.com> - 1:2.2.4-7
- convert license to SPDX

* Fri Jul 19 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1:2.2.4-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild