[Git][security-tracker-team/security-tracker][master] Add upstream patch reference for CVE-2026-26962 for version 3.1.x

[Abhijith PA (@abhijith)]

Abhijith PA pushed to branch master at Debian Security Tracker / security-tracker


Commits:
eba70ffe by Abhijith PA at 2026-08-19T14:10:57+05:30
Add upstream patch reference for CVE-2026-26962 for version 3.1.x

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -111562,6 +111562,7 @@ CVE-2026-26962 (Rack is a modular Ruby web server interface. From version 3.2.0
 	[bullseye] - ruby-rack <not-affected> (Vulnerable code introduced later)
 	NOTE: https://github.com/rack/rack/security/advisories/GHSA-rx22-g9mx-qrhv
 	NOTE: Fixed by: https://github.com/rack/rack/commit/d50c4d3dab62fa80b2a276271d0d4fb338cfa7df (v3.2.6)
+	NOTE: Fixed by: https://github.com/rack/rack/commit/ae320b46617e9131c34ad77ea15f1c3b036c43e6 (v3.1.22)
 CVE-2026-26961 (Rack is a modular Ruby web server interface. Prior to versions 2.2.23, ...)
 	{DLA-4706-1}
 	[experimental] - ruby-rack 3.2.6-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eba70ffeb08941c49388847d64434f921c84f55d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eba70ffeb08941c49388847d64434f921c84f55d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260819/26f34f2a/attachment.htm>