More information about this security flaw is available in the following bug: https://bugzilla.redhat.com/show_bug.cgi?id=2345301 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
@Avinash could you please doublecheck why @pvalena is assignee of this ticket when he is not related to this package for ~4 months already? ~~~ $ curl https://src.fedoraproject.org/api/0/rpms/rubygem-rack | grep pvalena % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 918 100 918 0 0 1599 0 --:--:-- --:--:-- --:--:-- 1602 $ curl https://src.fedoraproject.org/api/0/rpms/rubygem-rack { "access_groups": { "admin": [], "collaborator": [], "commit": [ "ruby-packagers-sig" ], "ticket": [] }, "access_users": { "admin": [], "collaborator": [ "tdawson" ], "commit": [], "owner": [ "vondruch" ], "ticket": [] }, "close_status": [], "custom_keys": [], "date_created": "1501874613", "date_modified": "1727778646", "description": "The rubygem-rack rpms", "full_url": "https://src.fedoraproject.org/rpms/rubygem-rack", "fullname": "rpms/rubygem-rack", "id": 20697, "milestones": {}, "name": "rubygem-rack", "namespace": "rpms", "parent": null, "priorities": {}, "tags": [], "url_path": "rpms/rubygem-rack", "user": { "full_url": "https://src.fedoraproject.org/user/vondruch", "fullname": "V\u00edt Ondruch", "name": "vondruch", "url_path": "user/vondruch" } } ~~~
(In reply to Vít Ondruch from comment #1) > @Avinash could you please doublecheck why @pvalena is assignee of this > ticket when he is not related to this package for ~4 months already? As it turns out, there was override in https://src.fedoraproject.org/rpms/rubygem-rack
FEDORA-2025-a35addbf9b (rubygem-rack-2.2.21-1.fc41) has been submitted as an update to Fedora 41. https://bodhi.fedoraproject.org/updates/FEDORA-2025-a35addbf9b
FEDORA-2025-a35addbf9b has been pushed to the Fedora 41 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-a35addbf9b` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-a35addbf9b See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2025-a35addbf9b (rubygem-rack-2.2.21-1.fc41) has been pushed to the Fedora 41 stable repository. If problem still persists, please make note of it in this bug report.