FEDORA-2017-c22a8af4e9 — security update for rubygem-rack-cors

stable

FEDORA-2017-c22a8af4e9 created by valtri 5 years ago for Fedora 25

Security fix for CVE-2017-11173, new upstream version

sudo dnf upgrade --refresh --advisory=FEDORA-2017-c22a8af4e9

This update has been submitted for testing by valtri.

This update has been pushed to testing.

Tested a tiny app using sinatra and it looks good.

BZ#1470689 CVE-2017-11173 rubygem-rack-cors: Missing anchor in generated regex in rack/cors.rb#L256 may permit forged malicious requests [fedora-all]

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

This update has been submitted for stable by valtri.

This update has been pushed to stable.

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

Settings

Unstable by Karma

-2

Stable by Karma

Stable by Time

disabled

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

BZ#1470689 CVE-2017-11173 rubygem-rack-cors: Missing anchor in generated regex in rack/cors.rb#L256 may permit forged malicious requests [fedora-all]

rubygem-rack-cors-0.4.1-1.fc25

None