[Git][security-tracker-team/security-tracker][master] Mark CVE-2026-32762 as not-affected for bookworm and bullseye
Abhijith PA (@abhijith)
abhijith at debian.org
Sat Jul 25 07:49:03 BST 2026
Abhijith PA pushed to branch master at Debian Security Tracker / security-tracker
Commits:
5da28e26 by Abhijith PA at 2026-07-25T12:18:38+05:30
Mark CVE-2026-32762 as not-affected for bookworm and bullseye
Rack::Utils.forwarded_values introduced from 3.0.0.beta1
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -80786,6 +80786,8 @@ CVE-2026-32871 (FastMCP is a Pythonic way to build MCP servers and clients. Prio
CVE-2026-32762 (Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 ...)
[experimental] - ruby-rack 3.2.6-1
- ruby-rack 3.2.6-2
+ [bookworm] - ruby-rack <not-affected> (Vulnerable code introduced later)
+ [bullseye] - ruby-rack <not-affected> (Vulnerable code introduced later)
NOTE: https://github.com/rack/rack/security/advisories/GHSA-qfgr-crr9-7r49
NOTE: Fixed by: https://github.com/rack/rack/commit/27e06c695f3a47bdd9d21a1a7e8d97e12c52c255 (v3.2.6)
NOTE: Fixed by: https://github.com/rack/rack/commit/9df5d34d4f496b22b8d07e919447e9dfa3240d41 (v3.1.21)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5da28e26901e7724a904b813c0378673ab30453c
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5da28e26901e7724a904b813c0378673ab30453c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260725/6ce92b7f/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list