Register | Log in

ruby-rack-cors

enable Cross-Origin Resource Sharing in Rack apps

Choose email to subscribe with

general

source: ruby-rack-cors (main)
version: 1.0.2-1
maintainer: Debian Ruby Extras Maintainers (archive) (DMD)
uploaders: Pirate Praveen [DMD]
arch: all
std-ver: 4.1.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.2.9-1
oldstable: 0.4.0-1+deb9u1
old-sec: 0.4.0-1+deb9u1
old-bpo: 1.0.1-2~bpo9+1
stable: 1.0.2-1
testing: 1.0.2-1
unstable: 1.0.2-1

versioned links

0.2.9-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.4.0-1+deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.0.1-2~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.0.2-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

ruby-rack-cors

action needed

A new upstream version is available: 1.1.0 high

A new upstream version 1.1.0 is available, you should consider packaging it.

Created: 2019-03-28 Last update: 2019-12-12 13:36

Marked for autoremoval on 15 December: #944849 high

Version 1.0.2-1 of ruby-rack-cors is marked for autoremoval from testing on Sun 15 Dec 2019. It is affected by #944849. You should try to prevent the removal by fixing these RC bugs.

Created: 2019-11-23 Last update: 2019-12-12 13:09

1 security issue in buster high

There is 1 open security issue in buster.

1 important issue:

CVE-2019-18978: An issue was discovered in the rack-cors (aka Rack CORS Middleware) gem before 1.0.4 for Ruby. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.

Please fix it.

Created: 2019-11-15 Last update: 2019-11-16 14:52

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2019-18978: An issue was discovered in the rack-cors (aka Rack CORS Middleware) gem before 1.0.4 for Ruby. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.

Please fix it.

Created: 2019-11-15 Last update: 2019-11-16 14:52

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2019-18978: An issue was discovered in the rack-cors (aka Rack CORS Middleware) gem before 1.0.4 for Ruby. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.

Please fix it.

Created: 2019-11-15 Last update: 2019-11-16 14:52

1 security issue in jessie high

There is 1 open security issue in jessie.

1 important issue:

CVE-2019-18978: An issue was discovered in the rack-cors (aka Rack CORS Middleware) gem before 1.0.4 for Ruby. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.

Please fix it.

Created: 2019-11-15 Last update: 2019-11-16 14:52

1 security issue in stretch high

There is 1 open security issue in stretch.

1 important issue:

CVE-2019-18978: An issue was discovered in the rack-cors (aka Rack CORS Middleware) gem before 1.0.4 for Ruby. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.

Please fix it.

Created: 2019-11-15 Last update: 2019-11-16 14:52

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 1.0.2-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 5044882e4a0d35930c6cd6625ea6da0bc6be23f6
Author: Utkarsh Gupta <guptautkarsh2102@gmail.com>
Date:   Tue Aug 13 06:45:13 2019 +0530

    Update d/ch

commit f48fc8ca6e8dfbde42a7db0c543d7b76fbe468fe
Author: Utkarsh Gupta <guptautkarsh2102@gmail.com>
Date:   Tue Aug 13 06:45:12 2019 +0530

    Add salsa-ci.yml

Created: 2019-08-13 Last update: 2019-12-08 11:39

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.4.1 instead of 4.1.4).

Created: 2018-08-20 Last update: 2019-09-29 23:40

news

[2018-06-22] ruby-rack-cors 1.0.2-1 MIGRATED to testing (Debian testing watch)
[2018-06-20] Accepted ruby-rack-cors 1.0.2-1 (source) into unstable (Hari Govind S) (signed by: Praveen Arimbrathodiyil)
[2018-05-22] Accepted ruby-rack-cors 1.0.1-2~bpo9+1 (source all) into stretch-backports, stretch-backports (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2018-02-27] ruby-rack-cors 1.0.1-2 MIGRATED to testing (Debian testing watch)
[2018-02-22] Accepted ruby-rack-cors 1.0.1-2 (source) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2017-09-30] Accepted ruby-rack-cors 1.0.1-1 (source) into experimental (Sruthi Chandran) (signed by: Praveen Arimbrathodiyil)
[2017-08-11] Accepted ruby-rack-cors 0.4.0-1+deb9u1 (source all) into proposed-updates->stable-new, proposed-updates (Moritz Muehlenhoff) (signed by: Moritz Mühlenhoff)
[2017-07-03] ruby-rack-cors 0.4.1-1 MIGRATED to testing (Debian testing watch)
[2017-06-27] Accepted ruby-rack-cors 0.4.1-1 (source) into unstable (Sruthi Chandran) (signed by: Praveen Arimbrathodiyil)
[2015-07-19] ruby-rack-cors 0.4.0-1 MIGRATED to testing (Britney)
[2015-07-13] Accepted ruby-rack-cors 0.4.0-1 (source all) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2015-05-05] ruby-rack-cors 0.3.1-2 MIGRATED to testing (Britney)
[2015-04-29] Accepted ruby-rack-cors 0.3.1-2 (source all) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2015-04-03] Accepted ruby-rack-cors 0.3.1-1 (source all) into experimental (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2014-05-05] ruby-rack-cors 0.2.9-1 MIGRATED to testing (Debian testing watch)
[2014-04-24] Accepted ruby-rack-cors 0.2.9-1 (source all) (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2013-05-05] ruby-rack-cors 0.2.7-1 MIGRATED to testing (Debian testing watch)
[2013-04-01] Accepted ruby-rack-cors 0.2.7-1 (source all) (Praveen Arimbrathodiyil)

bugs [bug history graph]

all: 1
RC: 1
I&N: 0
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs, clang, reproducibility
popcon
browse source code
edit tags
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.0.2-1

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing