--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-12978
2015-08-07 10:05:11
--------------------------------------------------------------------------------

Name        : rubygem-rack
Product     : Fedora 22
Version     : 1.6.1
Release     : 2.fc22
URL         : Summary     : Common API for connecting web frameworks, web servers and layers of software
Description :
Rack provides a common API for connecting web frameworks,
web servers and layers of software in between

--------------------------------------------------------------------------------
Update Information:

Fix for CVE-2015-3225: Potential Denial of Service Vulnerability in Rack
- Related rhbz#CVE-2015-3225

New rubygem-rack-1.6.1-1.fc22
--------------------------------------------------------------------------------
ChangeLog:

* Thu Aug  6 2015 Josef Stribny  - 1:1.6.1-2
- Fix for CVE-2015-3225: Potential Denial of Service Vulnerability in Rack
  - Related rhbz#CVE-2015-3225
* Tue Jun  2 2015 Steve Traylen  - 1:1.6.1-1
- Update to 1.6.1
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1232292 - CVE-2015-3225 rubygem-rack: Potential Denial of Service Vulnerability in Rack normalize_params()
        https://bugzilla.redhat.com/show_bug.cgi?id=1232292
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update rubygem-rack' at the command line.
For more information, refer to "Managing Software with yum",
available at .

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/