USN-5896-1: Rack vulnerabilities

[kalpana]

Hi Forum Mates,

I am trying to find more information regarding the following vulnerability:

https://ubuntu.com/security/notices/USN-5896-1

I have the following package installed:

Installed package : ruby-rack_2.0.7-2ubuntu0.1 Fixed package : ruby-rack_2.0.7-2ubuntu0.1+esm2

Does anyone know what the difference is between both packages outside of needing a ESM subscription? Was something additionally patched in the ESM version of the package?

Thanks!