Home / mailings [SECURITY] [DSA 6492-1] ruby-rack security update
Posted on 10 September 2026
Debian Security Advisory- -------------------------------------------------------------------------
Debian Security Advisory DSA-6492-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
September 10, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : ruby-rack
CVE ID : CVE-2026-26961 CVE-2026-26962 CVE-2026-32762
CVE-2026-34230 CVE-2026-34763 CVE-2026-34785
CVE-2026-34786 CVE-2026-34826 CVE-2026-34827
CVE-2026-34829 CVE-2026-34830 CVE-2026-34831
CVE-2026-34835
Multiple security issues were found in Rack, an interface for developing
web applications in Ruby, which could result in denial of service,
information disclosure, spoofing or bypass of access restrictions.
For the stable distribution (trixie), these problems have been fixed in
version 3.1.20-0+deb13u2.
We recommend that you upgrade your ruby-rack packages.
For the detailed security status of ruby-rack please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/ruby-rack
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
