Hello, at https://www.debian.org/News/2017/20171007 the DSA link for ruby-rack-cors is dead:
https://www.debian.org/security/2017/dsa-3931 There is no such DSA. And also no such announcement on https://lists.debian.org/debian-security-announce/ Don't know what's wrong here... Holger