[From nobody Fri Mar 27 00:49:08 2026 Received: (at submit) by bugs.debian.org; 20 Feb 2026 08:05:25 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-8.5 required=4.0 tests=BAYES_00, FOURLA, FROMDEVELOPER, KHOP_HELO_FCRDNS,PDS_RDNS_DYNAMIC_FP,RDNS_DYNAMIC,SPF_HELO_NONE, SPF_NONE,XMAILER_REPORTBUG autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 23; hammy, 148; neutral, 42; spammy, 2. spammytokens:0.954-+--s, 0.942-+--H*r:bugs.debian.org hammytokens:0.000-+--H*F:U*carnil, 0.000-+--XDebbugsCc, 0.000-+--X-Debbugs-Cc, 0.000-+--HTo:N*Debian, 0.000-+--H*Ad:N*Bug Return-path: <carnil@debian.org> Received: from c-82-192-244-13.customer.ggaweb.ch ([82.192.244.13]:36264 helo=eldamar.lan) by buxtehude.debian.org with esmtp (Exim 4.96) (envelope-from <carnil@debian.org>) id 1vtLVt-007WoN-05 for submit@bugs.debian.org; Fri, 20 Feb 2026 08:05:25 +0000 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Salvatore Bonaccorso <carnil@debian.org> To: Debian Bug Tracking System <submit@bugs.debian.org> Subject: ruby-rack: CVE-2026-22860 Message-ID: <177157472396.1052506.7386055411623395600.reportbug@eldamar.lan> X-Mailer: reportbug 13.2.0 Date: Fri, 20 Feb 2026 09:05:23 +0100 Delivered-To: submit@bugs.debian.org U291cmNlOiBydWJ5LXJhY2sKVmVyc2lvbjogMy4yLjQtMQpTZXZlcml0eTogaW1wb3J0YW50ClRh Z3M6IHNlY3VyaXR5IHVwc3RyZWFtClgtRGViYnVncy1DYzogY2FybmlsQGRlYmlhbi5vcmcsIERl YmlhbiBTZWN1cml0eSBUZWFtIDx0ZWFtQHNlY3VyaXR5LmRlYmlhbi5vcmc+CkNvbnRyb2w6IGZv dW5kIC0xIDMuMS4xOC0xCkNvbnRyb2w6IGZvdW5kIC0xIDMuMS4xOC0xfmRlYjEzdTEKQ29udHJv bDogZm91bmQgLTEgMi4yLjIwLTArZGViMTJ1MQoKSGksCgpUaGUgZm9sbG93aW5nIHZ1bG5lcmFi aWxpdHkgd2FzIHB1Ymxpc2hlZCBmb3IgcnVieS1yYWNrLgoKQ1ZFLTIwMjYtMjI4NjBbMF06Cnwg UmFjayBpcyBhIG1vZHVsYXIgUnVieSB3ZWIgc2VydmVyIGludGVyZmFjZS4gUHJpb3IgdG8gdmVy c2lvbnMKfCAyLjIuMjIsIDMuMS4yMCwgYW5kIDMuMi41LCBgUmFjazo6RGlyZWN0b3J5YOKAmXMg cGF0aCBjaGVjayB1c2VkIGEKfCBzdHJpbmcgcHJlZml4IG1hdGNoIG9uIHRoZSBleHBhbmRlZCBw YXRoLiBBIHJlcXVlc3QgbGlrZQp8IGAvLi4vcm9vdF9leGFtcGxlL2AgY2FuIGVzY2FwZSB0aGUg Y29uZmlndXJlZCByb290IGlmIHRoZSB0YXJnZXQKfCBwYXRoIHN0YXJ0cyB3aXRoIHRoZSByb290 IHN0cmluZywgYWxsb3dpbmcgZGlyZWN0b3J5IGxpc3Rpbmcgb3V0c2lkZQp8IHRoZSBpbnRlbmRl ZCByb290LiBWZXJzaW9ucyAyLjIuMjIsIDMuMS4yMCwgYW5kIDMuMi41IGZpeCB0aGUgaXNzdWUu CgoKSWYgeW91IGZpeCB0aGUgdnVsbmVyYWJpbGl0eSBwbGVhc2UgYWxzbyBtYWtlIHN1cmUgdG8g aW5jbHVkZSB0aGUKQ1ZFIChDb21tb24gVnVsbmVyYWJpbGl0aWVzICYgRXhwb3N1cmVzKSBpZCBp biB5b3VyIGNoYW5nZWxvZyBlbnRyeS4KCkZvciBmdXJ0aGVyIGluZm9ybWF0aW9uIHNlZToKClsw XSBodHRwczovL3NlY3VyaXR5LXRyYWNrZXIuZGViaWFuLm9yZy90cmFja2VyL0NWRS0yMDI2LTIy ODYwCiAgICBodHRwczovL3d3dy5jdmUub3JnL0NWRVJlY29yZD9pZD1DVkUtMjAyNi0yMjg2MApb MV0gaHR0cHM6Ly9naXRodWIuY29tL3JhY2svcmFjay9zZWN1cml0eS9hZHZpc29yaWVzL0dIU0Et bXh3My0zaGgyLXgybWgKClJlZ2FyZHMsClNhbHZhdG9yZQo= ]