Accepted ruby-rack-session 2.1.1-0.1+deb13u1 (source) into stable-security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 28 Sep 2026 19:49:51 -0500
Source: ruby-rack-session
Built-For-Profiles: derivative.ubuntu noudeb
Architecture: source
Version: 2.1.1-0.1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian Ruby Extras Maintainers <pkg-ruby-extras-maintainers@lists.alioth.debian.org>
Changed-By: Simon Quigley <tsimonq2@debian.org>
Changes:
 ruby-rack-session (2.1.1-0.1+deb13u1) trixie-security; urgency=high
 .
   * Team upload.
   * CVE-2026-39324: reject a session cookie when decryption fails
     instead of accepting it with the unencrypted coder.
Checksums-Sha1:
 2279c48e212dfc510a05df5db7eca13c38410358 2242 ruby-rack-session_2.1.1-0.1+deb13u1.dsc
 a1ce3db22519fff6283776b5b7438fbbf40bb385 25063 ruby-rack-session_2.1.1.orig.tar.gz
 4381ca1c2486d951c02bcf1efd761fe5446690aa 4792 ruby-rack-session_2.1.1-0.1+deb13u1.debian.tar.xz
 3764a1662606c2e4d084f66f566d7569e5eade10 7694 ruby-rack-session_2.1.1-0.1+deb13u1_source.buildinfo
Checksums-Sha256:
 06cb1f1eb3d60c8a0a6faacc02959c74731fdaf1f4bdb5301cfcabf7a5c9bd67 2242 ruby-rack-session_2.1.1-0.1+deb13u1.dsc
 017498e6e0cdabae278256aac18043342b191110e4684a1971bbe295acdf180a 25063 ruby-rack-session_2.1.1.orig.tar.gz
 c43e988178b7f503925e9b9123067f0edaf00c464689b3213862ee26b1c4ef1e 4792 ruby-rack-session_2.1.1-0.1+deb13u1.debian.tar.xz
 aae4f7f5ff1d5d992446a24f046e8f9d68ac6e615772ceba23e71c8e3f758a7d 7694 ruby-rack-session_2.1.1-0.1+deb13u1_source.buildinfo
Files:
 ba6b274278982c3c215de2c87e739057 2242 ruby optional ruby-rack-session_2.1.1-0.1+deb13u1.dsc
 b8ae9c668a990af8b3320c39935d61e5 25063 ruby optional ruby-rack-session_2.1.1.orig.tar.gz
 64b7abd9954adbdb70cd3fdd663b3fff 4792 ruby optional ruby-rack-session_2.1.1-0.1+deb13u1.debian.tar.xz
 ce1c7ee083c1a508808cd42e1aab6dfa 7694 ruby optional ruby-rack-session_2.1.1-0.1+deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=/i3Z
-----END PGP SIGNATURE-----