Abhijith PA pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
5da28e26 by Abhijith PA at 2026-07-25T12:18:38+05:30
Mark CVE-2026-32762 as not-affected for bookworm and bullseye
Rack::Utils.forwarded_values introduced from 3.0.0.beta1
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -80786,6 +80786,8 @@ CVE-2026-32871 (FastMCP is a Pythonic way to build MCP
servers and clients. Prio
CVE-2026-32762 (Rack is a modular Ruby web server interface. From versions
3.0.0.beta1 ...)
[experimental] - ruby-rack 3.2.6-1
- ruby-rack 3.2.6-2
+ [bookworm] - ruby-rack <not-affected> (Vulnerable code introduced later)
+ [bullseye] - ruby-rack <not-affected> (Vulnerable code introduced later)
NOTE:
https://github.com/rack/rack/security/advisories/GHSA-qfgr-crr9-7r49
NOTE: Fixed by:
https://github.com/rack/rack/commit/27e06c695f3a47bdd9d21a1a7e8d97e12c52c255
(v3.2.6)
NOTE: Fixed by:
https://github.com/rack/rack/commit/9df5d34d4f496b22b8d07e919447e9dfa3240d41
(v3.1.21)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5da28e26901e7724a904b813c0378673ab30453c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5da28e26901e7724a904b813c0378673ab30453c
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
