Rack Versions Save

A modular Ruby web server interface.

v3.0.9.1

2 months ago

What's Changed

Fixed ReDoS in Accept header parsing [CVE-2024-26146]
Fixed ReDoS in Content Type header parsing [CVE-2024-25126]
Reject Range headers which are too large [CVE-2024-26141]

Full Changelog: https://github.com/rack/rack/compare/v3.0.9...v3.0.9.1

v2.2.8.1

2 months ago

What's Changed

Fixed ReDoS in Accept header parsing [CVE-2024-26146]
Fixed ReDoS in Content Type header parsing [CVE-2024-25126]
Reject Range headers which are too large [CVE-2024-26141]

Full Changelog: https://github.com/rack/rack/compare/v2.2.8...v2.2.8.1

v2.1.4.4

2 months ago

What's Changed

Fixed ReDoS in Accept header parsing [CVE-2024-26146]

Full Changelog: https://github.com/rack/rack/compare/v2.1.4.3...v2.1.4.4

v2.0.9.4

2 months ago

What's Changed

Fixed ReDoS in Accept header parsing [CVE-2024-26146]

Full Changelog: https://github.com/rack/rack/compare/v2.0.9.3...v2.0.9.4

v2.2.8

3 months ago

What's Changed

Limit file extension length of multipart tempfiles (2.2 backport) by @dentarg in https://github.com/rack/rack/pull/2075
CHANGELOG: Add missing 2.2.7 by @tisba in https://github.com/rack/rack/pull/2081
Update cookie.rb by @dchandekstark in https://github.com/rack/rack/pull/2092
Prefer ubuntu-latest for testing. by @ioquatix in https://github.com/rack/rack/pull/2095
Fix inefficient assert pattern in Rack::Lint [2-2-stable] by @skipkayhil in https://github.com/rack/rack/pull/2101
Regenerate SPEC [2-2-stable] by @skipkayhil in https://github.com/rack/rack/pull/2102

New Contributors

@tisba made their first contribution in https://github.com/rack/rack/pull/2081
@dchandekstark made their first contribution in https://github.com/rack/rack/pull/2092

Full Changelog: https://github.com/rack/rack/compare/v2.2.7...v2.2.8

v3.0.9

3 months ago

What's Changed

Fix content-length calcuation in Rack:Response#write #2150

Full Changelog: https://github.com/rack/rack/compare/v3.0.8...v3.0.9

v3.0.8

11 months ago

What's Changed

Backport "Fix some unused variable verbose warnings" by @skipkayhil in https://github.com/rack/rack/pull/2084

New Contributors

@skipkayhil made their first contribution in https://github.com/rack/rack/pull/2084

Full Changelog: https://github.com/rack/rack/compare/v3.0.7...v3.0.8

v2.2.7

1 year ago

What's Changed

Correct the year number in the changelog by @kimulab in https://github.com/rack/rack/pull/2015
Support underscore in host names for Rack 2.2 (Fixes #2070) by @jeremyevans in https://github.com/rack/rack/pull/2071

New Contributors

@kimulab made their first contribution in https://github.com/rack/rack/pull/2015

Full Changelog: https://github.com/rack/rack/compare/v2.2.6.4...v2.2.7

v3.0.7

1 year ago

What's Changed

Backport "Make query parameters without = have nil values". by @jeremyevans in https://github.com/rack/rack/pull/2060

Full Changelog: https://github.com/rack/rack/compare/v3.0.6.1...v3.0.7

v3.0.6.1

1 year ago