[Git][security-tracker-team/security-tracker][master] Mark CVE-2026-26962 as not-affected for bookworm and bullseye.

[Abhijith PA (@abhijith)]

Abhijith PA pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8ae1e56f by Abhijith PA at 2026-07-25T11:59:41+05:30
Mark CVE-2026-26962 as not-affected for bookworm and bullseye.
https://lists.debian.org/debian-lts/2026/07/msg00079.html

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -80891,6 +80891,8 @@ CVE-2026-27774 (Local privilege escalation due to DLL hijacking vulnerability. T
 CVE-2026-26962 (Rack is a modular Ruby web server interface. From version 3.2.0 to bef ...)
 	[experimental] - ruby-rack 3.2.6-1
 	- ruby-rack 3.2.6-2
+	[bookworm] - ruby-rack <not-affected> (Vulnerable code introduced later)
+	[bullseye] - ruby-rack <not-affected> (Vulnerable code introduced later)
 	NOTE: https://github.com/rack/rack/security/advisories/GHSA-rx22-g9mx-qrhv
 	NOTE: Fixed by: https://github.com/rack/rack/commit/d50c4d3dab62fa80b2a276271d0d4fb338cfa7df (v3.2.6)
 CVE-2026-26961 (Rack is a modular Ruby web server interface. Prior to versions 2.2.23, ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8ae1e56f5d4dbea0c266451f1659b3295b1d2d55

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8ae1e56f5d4dbea0c266451f1659b3295b1d2d55
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260725/df42fedd/attachment.htm>