[DRE-maint] rails_5.2.4.3+dfsg-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Thu, 04 Jun 2020 11:41:38 +0530
Source: rails
Architecture: source
Version: 2:5.2.4.3+dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Ruby Extras Maintainers <pkg-ruby-extras-maintainers at lists.alioth.debian.org>
Changed-By: Utkarsh Gupta <utkarsh at debian.org>
Changes:
 rails (2:5.2.4.3+dfsg-1) unstable; urgency=medium
 .
   * New upstream version 5.2.4.3+dfsg
     - Circumvention of file size limits in ActiveStorage
       (Fixes: CVE-2020-8162)
     - Possible Strong Parameters Bypass in ActionPack
       (Fixes: CVE-2020-8164)
     - Potentially unintended unmarshalling of user-provided objects
       in MemCacheStore and RedisCacheStore (Fixes: CVE-2020-8165)
     - Ability to forge per-form CSRF tokens given a global CSRF token
       (Fixes: CVE-2020-8166)
     - CSRF Vulnerability in rails-ujs (Fixes: CVE-2020-8167)
   * Set debian-branch as 5.2.3+dfsg-1
   * Drop patches as they're merged upstream
   * Refresh d/patches
Checksums-Sha1:
 bd6b51c425c1243bea8ae610d156106201df27f0 4394 rails_5.2.4.3+dfsg-1.dsc
 bd8f726b22cb82f4499d35edf99db6335ec03143 6165572 rails_5.2.4.3+dfsg.orig.tar.xz
 a82368bedc2f182e66f83c12919653cd93d1464c 88068 rails_5.2.4.3+dfsg-1.debian.tar.xz
 9b3806b43dec91cfdc1bca27c0621dfbcd3fa1b6 20721 rails_5.2.4.3+dfsg-1_amd64.buildinfo
Checksums-Sha256:
 c370d10d978793bef32b32691845cd586e4faf80c10e9f09c5d7df7760c0794c 4394 rails_5.2.4.3+dfsg-1.dsc
 477c520383b336b9a0f95701e06b6f4e218d2d5d9632ae6f0f9f4c3a66c509e0 6165572 rails_5.2.4.3+dfsg.orig.tar.xz
 17b44ade1806cde6ebe3f5ef42766084af962c75bda76606994ddb54e7d75162 88068 rails_5.2.4.3+dfsg-1.debian.tar.xz
 edf7e645e4dd6e1a0dbafdde59654fa94a9d7211b6a06671a9131e5d41398b5a 20721 rails_5.2.4.3+dfsg-1_amd64.buildinfo
Files:
 69accb3fa59e25615eb62764a8afea61 4394 ruby optional rails_5.2.4.3+dfsg-1.dsc
 4cf83a85fd2a16b833d061bc74396372 6165572 ruby optional rails_5.2.4.3+dfsg.orig.tar.xz
 4ea21c5690d77ad4297d09077a2973e0 88068 ruby optional rails_5.2.4.3+dfsg-1.debian.tar.xz
 9c04c7c426bab4455ca4d84595c65b8e 20721 ruby optional rails_5.2.4.3+dfsg-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=eGTL
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.