| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: ruby4.0-rubygem-rack | Distribution: openSUSE Tumbleweed |
| Version: 3.2.8 | Vendor: openSUSE |
| Release: 1.1 | Build date: Mon Nov 2 15:32:13 2026 |
| Group: Unspecified | Build host: reproducible |
| Size: 543876 | Source RPM: rubygem-rack-3.2.8-1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://github.com/rack/rack | |
| Summary: A modular Ruby webserver interface | |
Rack provides a minimal, modular and adaptable interface for developing web applications in Ruby. By wrapping HTTP requests and responses in the simplest way possible, it unifies and distills the API for web servers, web frameworks, and software in between (the so-called middleware) into a single method call.
MIT
* Mon Nov 02 2026 Hendrik Vogelsang <hvogel@suse.com>
- New upstream release 3.2.8
- Fix GHSA-5v64-555j-wjxm Multipart parser retains parsed data in its scan
buffer, allowing denial of service via memory exhaustion.
- Fix GHSA-wvg4-6p58-3gh3 Rack::Static header rules were matched against an
unnormalized path, allowing dot segments to bypass them.
- Fix GHSA-2j8w-xcrc-x985 Rack::Request#host_with_port, #base_url, and #url
returned the raw authority when it was invalid; host_with_port now returns
nil in that case.
- Fix GHSA-p8x9-v4hv-2w4g Multipart requests with more than one boundary
parameter were accepted when the first value was empty or began with a
quote, semicolon, or comma, bypassing the guard added for CVE-2026-26961.
- For the rest see bundled CHANGELOG.md
* Mon Aug 17 2026 Jay Michalska <jay.michalska@suse.com>
- New upstream release 3.2.7, see bundled CHANGELOG.md
* Fri Apr 03 2026 Marcus Rueckert <mrueckert@suse.de>
- New upstream release 3.2.6, see bundled CHANGELOG.md
* Tue Oct 14 2025 Aleksei Burlakov <aburlakov@suse.com>
- New upstream release 3.1.18, see bundled CHANGELOG.md (bsc#1251936)
* Mon Jun 23 2025 Aleksei Burlakov <aburlakov@suse.com>
- New upstream release 3.1.16, see bundled CHANGELOG.md
* Tue Jun 17 2025 Eduardo Navarro <enavarro@suse.com>
- Remove the rb_build_* definitions for old sle versions. They are not needed any more.
* Wed May 21 2025 Jay Michalska <jay.michalska@suse.com>
- New upstream release 3.1.15, see bundled CHANGELOG.md
* Tue Mar 11 2025 Aleksei Burlakov <aburlakov@suse.com>
- New upstream release 3.1.12, see bundled CHANGELOG.md
- removed patches
fix CVE-2025-25184 [bsc#1237141], Rack::CommonLogger can be exploited by crafting input
- rubygem-rack-CVE-2025-25184.patch
fix CVE-2025-27111 [bsc#1238607], Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection
- rubygem-rack-CVE-2025-27111.patch
* Sun Mar 09 2025 Aleksei Burlakov <aburlakov@suse.com>
- security update
- added patches
fix CVE-2025-25184 [bsc#1237141], Rack::CommonLogger can be exploited by crafting input
+ rubygem-rack-CVE-2025-25184.patch
fix CVE-2025-27111 [bsc#1238607], Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection
+ rubygem-rack-CVE-2025-27111.patch
* Mon Nov 04 2024 Dan Čermák <dan.cermak@posteo.net>
- New upstream release 3.1.8, see bundled CHANGELOG.md
* Fri Jun 21 2024 Dan Čermák <dan.cermak@posteo.net>
- New upstream release 3.1.3, see bundled CHANGELOG.md
* Tue Feb 27 2024 pgajdos@suse.com
- version update to 3.0.9.1
* Fixed ReDoS in Accept header parsing [CVE-2024-26146][bsc#1220248]
* Fixed ReDoS in Content Type header parsing [CVE-2024-25126][bsc#1220239]
* Reject Range headers which are too large [CVE-2024-26141][bsc#1220242]
* Fix content-length calcuation in Rack:Response#write #2150
* Tue Nov 14 2023 Dan Čermák <dan.cermak@posteo.net>
- 3.0.8:
[#]# What's Changed
* Backport "Fix some unused variable verbose warnings" by @skipkayhil in https://github.com/rack/rack/pull/2084
[#]# New Contributors
* @skipkayhil made their first contribution in https://github.com/rack/rack/pull/2084
* *Full Changelog**: https://github.com/rack/rack/compare/v3.0.7...v3.0.8
* Sun May 14 2023 Marcus Rueckert <mrueckert@suse.de>
- cleanup ruby version restrictions
* Mon Mar 20 2023 pgajdos@suse.com
- version update to 3.0.7
[3.0.7] - 2023-03-16
Make query parameters without = have nil values. (#2059, @jeremyevans)
[3.0.6.1] - 2023-03-13
[CVE-2023-27539] Avoid ReDoS in header parsing [bsc#1209503]
[3.0.6] - 2023-03-13
Add QueryParser#missing_value for handling missing values + tests. (#2052, @ioquatix)
[3.0.5] - 2023-03-13
Split form/query parsing into two steps. (#2038, @matthewd)
* Thu Mar 09 2023 pgajdos@suse.com
- version update to 3.0.4.2
* rack.input is now optional, and if missing, will raise an error.
Use this to fail on multipart parsing a request without an input body.
(#2018, @ioquatix)
* Introduce module Rack::BadRequest which is included in multipart and
query parser errors. (#2019, @ioquatix)
* MIME type for JavaScript files (.js) changed from application/javascript
to text/javascript (1bd0f15)
* fixes CVE-2023-27530 [bsc#1209095]
* Fri Jan 20 2023 Hendrik Vogelsang <hvogel@suse.com>
updated to version 3.0.4.1
[CVE-2022-44571] Fix ReDoS vulnerability in multipart parser
[CVE-2022-44570] Fix ReDoS in Rack::Utils.get_byte_ranges
[CVE-2022-44572] Forbid control characters in attributes (also ReDoS)
For more detailed information see the installed CHANGELOG.md
/usr/lib64/ruby/gems/4.0.0/build_info /usr/lib64/ruby/gems/4.0.0/cache/rack-3.2.8.gem /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8 /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/CHANGELOG.md /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/CONTRIBUTING.md /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/MIT-LICENSE /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/README.md /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/SPEC.rdoc /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/auth /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/auth/abstract /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/auth/abstract/handler.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/auth/abstract/request.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/auth/basic.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/bad_request.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/body_proxy.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/builder.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/cascade.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/common_logger.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/conditional_get.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/config.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/constants.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/content_length.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/content_type.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/deflater.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/directory.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/etag.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/events.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/files.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/head.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/headers.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/lint.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/lock.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/media_type.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/method_override.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/mime.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/mock.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/mock_request.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/mock_response.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/multipart /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/multipart.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/multipart/generator.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/multipart/parser.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/multipart/uploaded_file.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/null_logger.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/query_parser.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/recursive.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/reloader.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/request.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/response.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/rewindable_input.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/runtime.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/sendfile.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/show_exceptions.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/show_status.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/static.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/tempfile_reaper.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/urlmap.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/utils.rb /usr/lib64/ruby/gems/4.0.0/gems/rack-3.2.8/lib/rack/version.rb /usr/lib64/ruby/gems/4.0.0/specifications/rack-3.2.8.gemspec /usr/share/doc/packages/ruby4.0-rubygem-rack /usr/share/doc/packages/ruby4.0-rubygem-rack/CHANGELOG.md /usr/share/doc/packages/ruby4.0-rubygem-rack/CONTRIBUTING.md /usr/share/doc/packages/ruby4.0-rubygem-rack/MIT-LICENSE /usr/share/doc/packages/ruby4.0-rubygem-rack/README.md
Generated by rpm2html 1.8.1
Fabrice Bellet, Tue Nov 3 23:02:18 2026