-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-6492-1 [email protected]
https://www.debian.org/security/ Moritz Muehlenhoff
September 10, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : ruby-rack
CVE ID : CVE-2026-26961 CVE-2026-26962 CVE-2026-32762
CVE-2026-34230 CVE-2026-34763 CVE-2026-34785
CVE-2026-34786 CVE-2026-34826 CVE-2026-34827
CVE-2026-34829 CVE-2026-34830 CVE-2026-34831
CVE-2026-34835
Multiple security issues were found in Rack, an interface for developing
web applications in Ruby, which could result in denial of service,
information disclosure, spoofing or bypass of access restrictions.
For the stable distribution (trixie), these problems have been fixed in
version 3.1.20-0+deb13u2.
We recommend that you upgrade your ruby-rack packages.
For the detailed security status of ruby-rack please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/ruby-rack
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----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=ImbC
-----END PGP SIGNATURE-----
