tocsin

Debian/ruby-rack: high 7.5

Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack’s media type parser to take much longer than expected, leading to a possible denial of service vulner

Action: Upgrade ruby-rack to 2.2.6.4-1+deb12u1 or later.

Affected

introducedfixedlast affected
02.2.6.4-1+deb12u1-

Fixed versions

2.2.6.4-1+deb12u1

Sources

published · modified · JSON