[SECURITY] [DLA 4706-1] ruby-rack security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4706-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA July 31, 2026 https://wiki.debian.org/LTS -...

TencentOS Server 4: pcs (TSSA-2026:0318)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0318 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

CVE-2026-34829 vulnerabilities

Vulnerabilities for packages: ruby3.3-rack, kube-fluentd-operator, ruby3.4-rack, gitlab-rails-ce-fips, ruby3.4-rails, ruby3.2-rack, ruby3.2-rails, gitlab-rails-ce, pact-broker-docker-fips, gitlab-cng, ruby4.0-rack, logstash, pact-broker-docker...

Linux Distros Unpatched Vulnerability : CVE-2026-34829

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Multipart::Parser only wraps the request body in a BoundedIO whe...

CVE-2026-34829

creationtimestamp| type| source ---|---|--- 2026-04-02 19:26:29+00:00| seen| Telegram/tHMZo4t6KJ7O3rHGS3YAWNGCGRHee0gil3YJsfVKclsQ 2026-04-03 05:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mikwtopmfr2w 2026-04-17 01:37:06+00:00| seen|...

CVE-2026-34829

Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Multipart::Parser only wraps the request body in a BoundedIO when CONTENTLENGTH is present. When a multipart/form-data request is sent without a Content-Length header, such as with HTTP chunked transfe...