Spec URL: https://fedorapeople.org/cgit/vondruch/public_git/rubygem-rack-session.git/plain/rubygem-rack-session.spec?id=a21563eaf622d55107a1eb849a22749051bbf2f9 SRPM URL: https://people.redhat.com/~vondruch/rubygem-rack-session-2.1.0-1.fc43.src.rpm Description: A session implementation for Rack. Fedora Account System Username: vondruch Copr: https://copr.fedorainfracloud.org/coprs/vondruch/ror8/package/rubygem-rack-session/ This will be needed by Ruby on Rails 8 and depends on Rack 3.x+ (bug 2124662). Can be unblocked by importing rack-session 1.x, but that is essentially just empty shell ...
Copr build: https://copr.fedorainfracloud.org/coprs/build/8635859 (failed) Build log: https://download.copr.fedorainfracloud.org/results/@fedora-review/fedora-review-2344660-rubygem-rack-session/fedora-rawhide-x86_64/08635859-rubygem-rack-session/builder-live.log.gz Please make sure the package builds successfully at least for Fedora Rawhide. - If the build failed for unrelated reasons (e.g. temporary network unavailability), please ignore it. - If the build failed because of missing BuildRequires, please make sure they are listed in the "Depends On" field --- This comment was created by the fedora-review-service https://github.com/FrostyX/fedora-review-service If you want to trigger a new Copr build, add a comment containing new Spec and SRPM URLs or [fedora-review-service-build] string.
(In reply to Fedora Review Service from comment #1) > Copr build: > https://copr.fedorainfracloud.org/coprs/build/8635859 > (failed) This is due to the rubygam-rack 2.x, while this pacakage requires 3.x
This needs update prior landing in Fedora, please see 2365151
I have updated the package to Rack::Session 2.1.1 to include fix for CVE-2025-46336 / bug 2365151 Spec URL: https://fedorapeople.org/cgit/vondruch/public_git/rubygem-rack-session.git/plain/rubygem-rack-session.spec?id=6197b187371bd8759414ea108a82a7c57b27f78b SRPM URL: https://people.redhat.com/~vondruch/rubygem-rack-session-2.1.1-1.fc43.src.rpm Copr: https://copr.fedorainfracloud.org/coprs/vondruch/ror8/package/rubygem-rack-session/
Taking for review.
Standard rubygem package, no surprises or deviations, content looks OK as does the specfile, gem hashes in SRPM match upstream. Package Approved!
The Pagure repository was created at https://src.fedoraproject.org/rpms/rubygem-rack-session
FEDORA-2025-203b7db566 (rubygem-actioncable-8.0.2-1.fc43, rubygem-actionmailbox-8.0.2-1.fc43, and 16 more) has been submitted as an update to Fedora 43. https://bodhi.fedoraproject.org/updates/FEDORA-2025-203b7db566
FEDORA-2025-203b7db566 (rubygem-actioncable-8.0.2-1.fc43, rubygem-actionmailbox-8.0.2-1.fc43, and 16 more) has been pushed to the Fedora 43 stable repository. If problem still persists, please make note of it in this bug report.