[From nobody Sat May 9 12:21:05 2026 Received: (at 1133007-close) by bugs.debian.org; 9 May 2026 11:19:47 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.1 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER, MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 83; hammy, 150; neutral, 117; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:59482) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wLfil-003BUx-1Q for 1133007-close@bugs.debian.org; Sat, 09 May 2026 11:19:47 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wLfii-0003py-24 for 1133007-close@bugs.debian.org; Sat, 09 May 2026 11:19:45 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=uQKkA/mPOZn7clUIVsycW/Db35mns2Jaqi/cHtCYS1E=; b=Zk8GKBoExOWg/x9RICdbJ2wd79 RSOMKmSHBMn5eF3WjLiASj1XDMy5+w065luwSG96foOtcgFtfBY9SD728BLhum8K8psvXVcRaGsEQ ZKxH4mnYtr2fTIhPKJ4lnCL+4jlRAdblN4kvvseGo9bMxlH8VRHNrinRQXkuYtY+xBPXzAQ6oBO0O 8yxXXLjtyOBMEejOzFOekNz51xRnaSWF5dadPhmjhBTnICI8qDuZ4ua3maVDwXrCEMQOJ2iDN8cUy /aOY+xA90EFO2JoTEi3w2zQEqZs8o9WJYYBXDO2J9GWVlBOgDzVnXOYioUgnXD6QTaSM+6wnOYgPI R89zva/A==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wLfii-00000003Ncx-0NYm; Sat, 09 May 2026 11:19:44 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Adrian Bunk <bunk@debian.org> To: 1133007-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: ruby-rack-session Debian: DAK Debian-Changes: ruby-rack-session_2.1.1-0.2_source.changes Debian-Source: ruby-rack-session Debian-Version: 2.1.1-0.2 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1133007: fixed in ruby-rack-session 2.1.1-0.2 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============7217410916440406266==" Message-Id: <E1wLfii-00000003Ncx-0NYm@fasolo.debian.org> Date: Sat, 09 May 2026 11:19:44 +0000 --===============7217410916440406266== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: ruby-rack-session Source-Version: 2.1.1-0.2 Done: Adrian Bunk <bunk@debian.org> We believe that the bug you reported is fixed in the latest version of ruby-rack-session, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1133007@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Adrian Bunk <bunk@debian.org> (supplier of updated ruby-rack-session package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 02 May 2026 11:37:55 +0300 Source: ruby-rack-session Architecture: source Version: 2.1.1-0.2 Distribution: unstable Urgency: medium Maintainer: Debian Ruby Extras Maintainers <pkg-ruby-extras-maintainers@lists= .alioth.debian.org> Changed-By: Adrian Bunk <bunk@debian.org> Closes: 1133007 Changes: ruby-rack-session (2.1.1-0.2) unstable; urgency=3Dmedium . * Non-maintainer upload. * CVE-2026-39324: decrypt failure falls back to accepting unencrypted cookies (Closes: #1133007) Checksums-Sha1: 9a9fe2a236049bc515ea0da46eb4f72ee55c05f4 2210 ruby-rack-session_2.1.1-0.2.dsc 79d6d771190d6b5b091c65278602a6d05ce0d6df 4780 ruby-rack-session_2.1.1-0.2.de= bian.tar.xz Checksums-Sha256: 2359f3794311c9194bcd5e966527e12040842c800f5e935a32d81cb6486f0389 2210 ruby-r= ack-session_2.1.1-0.2.dsc 7dfa9f984e71888eea825a8a1e271b85ae2e9990e93534d52a6b45bac46ba9a7 4780 ruby-r= ack-session_2.1.1-0.2.debian.tar.xz Files: e5ca36ba225d4e3841dbd31a08741b01 2210 ruby optional ruby-rack-session_2.1.1-= 0.2.dsc 0cf4b3349736e641d31bf90882acd5f9 4780 ruby optional ruby-rack-session_2.1.1-= 0.2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAmn1yeIACgkQiNJCh6LY mLECQA/+MBI6yM/nJOAoqUUbYt6KW7JyLMEsOMwa6VfMhdSC7wArWdBve5Ho6VcI eTM0LO/NEimtVjBvyJ5kU55Us1O2W4uFaMrfBYdyQsCWHn1nVkDv4IotUWJUgdTR /9B4t5o9adIn5ZtxnlrOCq/WAJScirXErTCYMvRNpFtlj1pI2qLmH/oYK53fovgF /wrBfZen3abqEX6wqe/gl7LK/t7FVGJhUCnhhYT8bWEO2/UkPmlFuEDwqPDYfbCI NUjwnXY6oRE+QB8tt8veQDUGhM+VUVZuYVMkH2Xgpt6WpvI0D0LZRpc1cpUC+LdQ aEgxDj4FO5pUtJoDlq0W2D6cCfqiwf/1+BHgzbX1OvFivkWjO2NchTwRSP0hStB3 JQTSTzUuDPl2KsobWazXV6cOrb/fB5wJpZuk97Skycdz7Lp6PEv8hPj0Ue7dNVya a88yqWMUBvdby0C1ipYvkUmcb8E7352NJ3S+5oyoKziv0CJQXNEkd8mtVrmOpA8x uVBmcegUhrTRsODju2ZeC/nLf6teiPG92JzqvOsCQ3HxUW7e78qF2nxic9GyNqN1 QlOtFhc8jQbbHEKD3CgiHqj1wADqwCnWTxtklZWudTRRsiwJads4O34Y8s8NpM9o NPCQf/9Jc4fauA2nqZ7mY5sxvIfevg0peSaopgTcnVtuaGUOEUA=3D =3D9CXN -----END PGP SIGNATURE----- --===============7217410916440406266== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaf8YUAAKCRCb9qggYcy5 IbXRAPwNb7r1nlM8YYYKN6eGN1ce5sZjgfPFL+jsLQnmJrUy0wD5AbOCJCOSBS01 iAHdHDyJVJMK8/p5RNE7amHYlMmaogw= =/FO2 -----END PGP SIGNATURE----- --===============7217410916440406266==-- ]