[SECURITY] [DLA 4706-1] ruby-rack security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4706-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA July 31, 2026 https://wiki.debian.org/LTS -...

CVE-2026-34831 vulnerabilities

Vulnerabilities for packages: pact-broker-docker, ruby4.0-rack, pact-broker-docker-fips, ruby3.2-rails, logstash, ruby3.3-rack, ruby3.4-rack, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rack, kube-fluentd-operator, gitlab-cng, ruby3.4-rails...

CVE-2026-34831

Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Filesfail sets the Content-Length response header using Stringsize instead of Stringbytesize. When the response body contains multibyte UTF-8 characters, the declared Content-Length is smaller than the...