-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 28 Sep 2026 19:49:51 -0500 Source: ruby-rack-session Binary: ruby-rack-session Architecture: all Version: 2.1.1-0.1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: Simon Quigley Description: ruby-rack-session - Session management implementation for Rack Changes: ruby-rack-session (2.1.1-0.1+deb13u1) trixie-security; urgency=high . * Team upload. * CVE-2026-39324: reject a session cookie when decryption fails instead of accepting it with the unencrypted coder. Checksums-Sha1: ac02f003a6500c87ce49565bcc7cb182a95329f7 8669 ruby-rack-session_2.1.1-0.1+deb13u1_all-buildd.buildinfo 11e92699e67a71e83f4db49c35dfb1a048988a96 12696 ruby-rack-session_2.1.1-0.1+deb13u1_all.deb Checksums-Sha256: 60d31c1cfd06f7d9f781e542eea89f593eac8488a0a6eb6c0c75a3e8f6243bf0 8669 ruby-rack-session_2.1.1-0.1+deb13u1_all-buildd.buildinfo 24801c6d5de5186f9527c3b32733a0a6f9a9fabf2f8d87bba9b876224e0a86b1 12696 ruby-rack-session_2.1.1-0.1+deb13u1_all.deb Files: 1742c5516e211c2e307b38dd2f3971a0 8669 ruby optional ruby-rack-session_2.1.1-0.1+deb13u1_all-buildd.buildinfo fba3261e2e148ac735009d9b6e28e526 12696 ruby optional ruby-rack-session_2.1.1-0.1+deb13u1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE5ZI1lXv5WjhHIVjsN8Ugyu9dQiQFAmq/25QACgkQN8Ugyu9d QiQcrA/+PJMHkHQWxOTG4YZOOThpeD0Da+t6WxV2T0YTZp3DtBxN9mxurst2dNAP wuCZhecJ9wgLeJJDpyBhKr2PpCekRdWyQspSdQc2fjHhZbIqMsAcOp8HJ4zvyoRD QWWFSgx2cfjxu38uvR3e5/kaOGoekjgP959/vkF1byseAlqnTnx8LgN9q8QihCNY oTI2vkWRjYwERtCNYZFB/2vtD847BfnV4cE/CUzoki4hqdjC5+0xxrnnGZy7IOEo BI8VFgZR0exo20u9kd+D3aVC6jPsRZw47L91w3wcKZie9goDAXgYBsf3B0Wii++g FdyBYIiuMjtfz6NEAwTczACVB639QwyUhbLjiSu4jqwfFZhxa5jbvVn/Img10wMT 7IniPsxna29xHiblc2jIB+B6OmM6qYpAiqh0tCZtTiFuDp2sHZ1Tbm/+C33TjnSO On4lVsDkvELPxbz80p7sSunjpql9JpIXrSRnlIJuoANhaD5AgPM2ysnQGbZT+n2Q 7C3fxIlF9XbiUsp+xTIhsHYYRHROzLwtkNSpErLbB0TqaRpDWtBvVjD4IkYOjAdO LvchL8g+9zK731SX3wsenxlTToReAMPk0uKSs3RvIVmgpsx+mwNiFh0uHQCvZzZ0 rQ7eQafsM/quYu6p9Bvn9dPfhAHaLiP/R5Cvjg0PI9fxM1WOfq0= =ELof -----END PGP SIGNATURE-----