[DRE-maint] Bug#653963: ruby-rack predictable hash collisions

Thijs Kinkhorst thijs at debian.org
Sun Jan 1 22:52:14 UTC 2012


Package: ruby-rack
Severity: serious
Tags: security

Hi,

It was reported that Rack is affected by the predictable hash collisions 
attack that made its rounds around the net this week. This is tracked at
http://security-tracker.debian.org/tracker/CVE-2011-5036

Can you ensure that fixed packages are uploaded to sid as soon as possible?


Cheers,
Thijs
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.alioth.debian.org/pipermail/pkg-ruby-extras-maintainers/attachments/20120101/92950499/attachment-0001.pgp>


More information about the Pkg-ruby-extras-maintainers mailing list