-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 07 Apr 2023 01:30:34 +0800
Source: rails
Architecture: source
Version: 2:6.0.3.7+dfsg-2+deb11u2
Distribution: bullseye-security
Urgency: high
Maintainer: Debian Ruby Team
<pkg-ruby-extras-maintain...@lists.alioth.debian.org>
Changed-By: Aron Xu <a...@debian.org>
Changes:
rails (2:6.0.3.7+dfsg-2+deb11u2) bullseye-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* CVE-2023-23913: a DOM based cross-site scripting in rails-ujs
for contenteditable HTML.
* CVE-2023-28120: Possible XSS Security Vulnerability in
SafeBuffer#bytesplice.
* Address a regression introduced in the fix of CVE-2021-22942.
Checksums-Sha1:
03b3263109511715298327a4214a480030d76ae0 4492 rails_6.0.3.7+dfsg-2+deb11u2.dsc
a1d89ed3584154428fa9b824d494ca29877ed6d9 118052
rails_6.0.3.7+dfsg-2+deb11u2.debian.tar.xz
dace066867037f598e4d4faceffb79bbc11ebd5a 9165
rails_6.0.3.7+dfsg-2+deb11u2_source.buildinfo
Checksums-Sha256:
464d29755a467026afce3ce3a33653993c43404ab1b2b2ffbf45eb71aa65f68e 4492
rails_6.0.3.7+dfsg-2+deb11u2.dsc
acc1ceaf6efb5d4a1ba53bf56ab762a975f86c1d90bc885ca9161c2106967410 118052
rails_6.0.3.7+dfsg-2+deb11u2.debian.tar.xz
de7002165c02ef2261b036b861a416999d12532acdf8fcbb41a373c38a98ad7b 9165
rails_6.0.3.7+dfsg-2+deb11u2_source.buildinfo
Files:
6c01eb2d26c20b09568cf612557ee14d 4492 ruby optional
rails_6.0.3.7+dfsg-2+deb11u2.dsc
c4a20b84617936a9b7cec969408f8c72 118052 ruby optional
rails_6.0.3.7+dfsg-2+deb11u2.debian.tar.xz
de5d74f22b6ddbfd49eb96bf502fd37c 9165 ruby optional
rails_6.0.3.7+dfsg-2+deb11u2_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCAAdFiEEhhz+aYQl/Bp4OTA7O1LKKgqv2VQFAmQ25iUACgkQO1LKKgqv
2VT2vAf+JOy13oLuse4WxnfSqetKLQBSVSwLeUV90WpKs9uGeFcHSpE7wFxtW/C6
SlIn5a3Qv6Y2lOXkUtMK646QMMILpenOegjQJIsjPaZqd7aSl/njIXXjnLsBMrIJ
/SuMgD5nXPYltbn86JaIolq2PBYivTJSFYOpa+rCGT0Fwn2DCLEIChA4xCMkJcgD
EBqW7dCCJIxEm3TKiz9L27AQ9N4DYkVSPowgIjs5gmsoCgWiQ3kMpkAW1SVaiwlm
smpEjV2rbkELhmdg0J31EZ3PqWeKJQICJXIusa9x5qJhP8/Xp/OdNusR9Zj5puTZ
1DXFMEBRk6GqU/yGfJcRlX6oRGeIlA==
=2r5Z
-----END PGP SIGNATURE-----
