File _patchinfo of Package patchinfo.16422

<patchinfo incident="16422">
  <issue tracker="cve" id="2020-8161"/>
  <issue tracker="cve" id="2020-8184"/>
  <issue tracker="cve" id="2019-16782"/>
  <issue tracker="bnc" id="1159548">VUL-0: CVE-2019-16782: rubygem-rack-1_4,rubygem-rack: Possible Information Leak / Session Hijack Vulnerability in Rack</issue>
  <issue tracker="bnc" id="1173351">VUL-0: CVE-2020-8184: rubygem-rack-1_4,rubygem-rack: rubygem-rack: percent-encoded cookies can be used to overwrite existing prefixed cookie names</issue>
  <issue tracker="bnc" id="1172037">VUL-0: CVE-2020-8161: rubygem-rack: directory traversal in Rack:Directory</issue>
  <packager>jgrassler</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for rubygem-rack</summary>
  <description>This update for rubygem-rack to version 1.6.13 fixes the following issues:

- CVE-2020-8184: Fixed an issue where percent-encoded cookies could have been used to overwrite existing prefixed cookie names (bsc#1173351).
- CVE-2020-8161: Fixed a directory traversal (bsc#1172037).
- CVE-2019-16782: Fixed an information leak / session hijack vulnerability (bsc#1159548).
</description>
</patchinfo>