Skip to content

[CVE-2025-61770] bump rack to 2.2.19 - #391

Merged
meghanmurphy1 merged 1 commit into
mainfrom
bump-rack-2.2.19
Oct 8, 2025
Merged

[CVE-2025-61770] bump rack to 2.2.19#391
meghanmurphy1 merged 1 commit into
mainfrom
bump-rack-2.2.19

Conversation

@meghanmurphy1

@meghanmurphy1 meghanmurphy1 commented Oct 8, 2025

Copy link
Copy Markdown
Contributor

Relates https://github.com/elastic/search-team/issues/11475

Bump Rack to 2.2.19 because of this CVE

Checklists

Pre-Review Checklist

  • This PR does NOT contain credentials of any kind, such as API keys or username/passwords (double check crawler.yml.example and elasticsearch.yml.example)
  • This PR has a meaningful title
  • This PR links to all relevant GitHub issues that it fixes or partially addresses
    • If there is no GitHub issue, please create it. Each PR should have a link to an issue
  • this PR has a thorough description
  • Covered the changes with automated tests
  • Tested the changes locally
  • Added a label for each target release version (example: v0.1.0)
  • Considered corresponding documentation changes
  • Contributed any configuration settings changes to the configuration reference
  • Ran make notice if any dependencies have been added

Changes Requiring Extra Attention

  • Security-related changes (encryption, TLS, SSRF, etc)
  • New external service dependencies added.

Related Pull Requests

Release Note

@meghanmurphy1
meghanmurphy1 requested a review from a team as a code owner October 8, 2025 18:30
@meghanmurphy1
meghanmurphy1 merged commit 220bcc0 into main Oct 8, 2025
2 checks passed
@meghanmurphy1
meghanmurphy1 deleted the bump-rack-2.2.19 branch October 8, 2025 18:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants