-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 05 Jul 2018 23:29:49 +0200 Source: ruby-sprockets Binary: ruby-sprockets Architecture: source Version: 3.7.0-1+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Debian Ruby Extras Maintainers <pkg-ruby-extras-maintainers@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 901913 Description: ruby-sprockets - Rack-based asset packaging system Changes: ruby-sprockets (3.7.0-1+deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the Security Team. * Do not respond to http requests asking for a `file://` (CVE-2018-3760) (Closes: #901913) Checksums-Sha1: cb8d8d5abd67cad9d0601e982a5f9864205fa192 2344 ruby-sprockets_3.7.0-1+deb9u1.dsc 9ad7b23911ddb9860376036afd39cbdd921e74fe 70453 ruby-sprockets_3.7.0.orig.tar.gz d9cdb0b35f5aa8d7c8997b0d6327cc5eab95ffad 4376 ruby-sprockets_3.7.0-1+deb9u1.debian.tar.xz fcedef4b5a3f62c498ebde3afb91292ce410c88e 5752 ruby-sprockets_3.7.0-1+deb9u1_source.buildinfo Checksums-Sha256: d14463e1e23261fb10613e96928b2a76b55eeac6c9fdea40c4c2696c5098f3b2 2344 ruby-sprockets_3.7.0-1+deb9u1.dsc 6add73c1003196ecdd762e54230f63ca78fab26919ae7ed1170e9cb84bb506ed 70453 ruby-sprockets_3.7.0.orig.tar.gz 50d280eab840bd837b1c7fe6af312b63e5978d9f48fb97633edf7fb5af8f9488 4376 ruby-sprockets_3.7.0-1+deb9u1.debian.tar.xz 61f35971e26f3c3886781d571d5833defdc96a34b45ce7b2f894500ab4d82984 5752 ruby-sprockets_3.7.0-1+deb9u1_source.buildinfo Files: 79bab0e80ae75ff456a26b81d016ace9 2344 ruby optional ruby-sprockets_3.7.0-1+deb9u1.dsc 461c7ff4b50b6136c914056fa459af39 70453 ruby optional ruby-sprockets_3.7.0.orig.tar.gz e1846ed8d432132c9e42e4a46b81bf81 4376 ruby optional ruby-sprockets_3.7.0-1+deb9u1.debian.tar.xz 5edcea919cee8a99dc3eb53c5a94833e 5752 ruby optional ruby-sprockets_3.7.0-1+deb9u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAltB0lNfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EfOAP/16M2jXPkDwlXxGh86+z7NRQ8SqZItqW XsK6SpOnxLPRgYPn1ZDGNfub+ryOpJLvUBMtiYREN7IMidTOWOXoL78YtKGz73K4 gLmEkmfQ+vY0tl4PmFuWr0O+MIueizhP2P77AKGWdpZEvwwLx7y3DVEmD3qWbwcj YWwFwVYwqOTc/i+2k2vwW7y3MgMnHt5quLHgv3KGdnHj8K/KEkltH2j8whmTSV0N pYASQCzv+db/fx8Q1U1yaqxzU/7uGfH8juE6kD5pFOwA0wB6gBsvKd7y5nt5HbrJ B8O+U8N0cSWfkqRAfPYNYH7VEylKD9yZPSBTIoJb492nuBbh+dOqDes4SGefiaPM bCtViVvPu5jK8p96FNxWT6xyX2x4X66khoc1F2Qj+qv9SizzsN7aO0XwGxgO0UEy WppdHt4dGEpFbynMuzm6BTz9ZT1hIB2yjrlVeI69hhijFsen5Q48v7ugN8wD7UCX D/jX/Kevwta3HsPTG9su9lmyDAvb+PrKfAMrTxPUgLtnrRXTRlcFKm5O5TkzeTL+ Z8ySD4Qde6QsqkqCNyAlu9F147nO37VDbxMT/MVnXKIj6GUBFPTJPzU0aPRnu0WF b46yYHRvADmmFscJvgLjPwxMR9K3Vrxj4oMZkJRGdWvan/uAm7Dux+X5Y+nXfRmT NwFkWdquq1Ea =JCC+ -----END PGP SIGNATURE-----