{"id":"MGASA-2026-0226","summary":"Updated ruby-rack packages fix security vulnerabilities","details":"CVE-2026-26961 Greedy multipart boundary parsing can cause parser\ndifferentials and WAF bypass. `Forwarded` header semicolon injection\nenables `Host` and `Scheme` spoofing.\nCVE-2026-34230 Quadratic complexity in\n`Rack::Utils.select_best_encoding` via wildcard `Accept-Encoding`\nheader.\nCVE-2026-34763 Root directory disclosure via unescaped regex\ninterpolation in `Rack::Directory`.\nCVE-2026-34785 `Rack::Static` prefix matching can expose unintended\nfiles under the static root.\nCVE-2026-34786 `Rack::Static` `header_rules` bypass via URL-encoded path\nmismatch.\nCVE-2026-34826 Multipart byte range processing allows denial of service\nvia excessive overlapping ranges.\nCVE-2026-34827 Multipart header parsing allows denial of service via\nescape-heavy quoted parameters.\nCVE-2026-34829 Multipart parsing without `Content-Length` header allows\nunbounded chunked file uploads.\nCVE-2026-34830 `Rack::Sendfile` header-based `X-Accel-Mapping` regex\ninjection enables unauthorized `X-Accel-Redirect`.\nCVE-2026-34831 `Content-Length` mismatch in `Rack::Files` error\nresponses.\nCVE-2026-34835 `Rack::Request` accepts invalid Host characters, enabling\nhost allowlist bypass.\n","modified":"2026-06-18T21:30:04.540060262Z","published":"2026-06-18T21:28:22Z","upstream":["CVE-2026-26961","CVE-2026-32762","CVE-2026-34230","CVE-2026-34763","CVE-2026-34785","CVE-2026-34786","CVE-2026-34826","CVE-2026-34827","CVE-2026-34829","CVE-2026-34830","CVE-2026-34831","CVE-2026-34835"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2026-0226.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=35446"},{"type":"ADVISORY","url":"https://github.com/rack/rack/security/advisories/GHSA-vgpv-f759-9wx3"},{"type":"ADVISORY","url":"https://github.com/rack/rack/security/advisories/GHSA-qfgr-crr9-7r49"},{"type":"ADVISORY","url":"https://github.com/rack/rack/security/advisories/GHSA-v569-hp3g-36wr"},{"type":"ADVISORY","url":"https://github.com/rack/rack/security/advisories/GHSA-7mqq-6cf9-v2qp"},{"type":"ADVISORY","url":"https://github.com/rack/rack/security/advisories/GHSA-h2jq-g4cq-5ppq"},{"type":"ADVISORY","url":"https://github.com/rack/rack/security/advisories/GHSA-q4qf-9j86-f5mh"},{"type":"ADVISORY","url":"https://github.com/rack/rack/security/advisories/GHSA-x8cg-fq8g-mxfx"},{"type":"ADVISORY","url":"https://github.com/rack/rack/security/advisories/GHSA-v6x5-cg8r-vv6x"},{"type":"ADVISORY","url":"https://github.com/rack/rack/security/advisories/GHSA-8vqr-qjwx-82mw"},{"type":"ADVISORY","url":"https://github.com/rack/rack/security/advisories/GHSA-qv7j-4883-hwh7"},{"type":"ADVISORY","url":"https://github.com/rack/rack/security/advisories/GHSA-q2ww-5357-x388"},{"type":"ADVISORY","url":"https://github.com/rack/rack/security/advisories/GHSA-g2pf-xv49-m2h5"}],"affected":[{"package":{"name":"ruby-rack","ecosystem":"Mageia:9","purl":"pkg:rpm/mageia/ruby-rack?arch=source&distro=mageia-9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.23-1.mga9"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2026-0226.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}