Re: Stretch 9.2 announcement: dead link for ruby-rack-cors DSA

On Wed, 2017-10-11 at 22:08 +0200, Holger Wansing wrote:
> at https://www.debian.org/News/2017/20171007 the DSA link for ruby-
> rack-cors
> is dead:
> 
> https://www.debian.org/security/2017/dsa-3931
> 
> There is no such DSA.
> And also no such announcement on https://lists.debian.org/debian-secu
> rity-announce/
> 

It's in DSA/list in the secure-testing repository:

[10 Aug 2017] DSA-3931-1 ruby-rack-cors - security update
        {CVE-2017-11173}
        [stretch] - ruby-rack-cors 0.4.0-1+deb9u1

which is where the stable tools got the information from to begin with.

The package is also in http://security.debian.org/debian-security/pool/
updates/main/r/ruby-rack-cors/

So it looks like the announcement went missing somehow. team@security
CCed for comment.

Regards,

Adam