--===============7369728684590235606==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature";
 boundary="3MwIy2ne0vdjdPXF"
Content-Disposition: inline


--3MwIy2ne0vdjdPXF
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

==========================================================================
Ubuntu Security Notice USN-6689-1
March 12, 2024

ruby-rack vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 23.10

Summary:

Rack could be made do denial of service if it received a specially
crafted header.

Software Description:
- ruby-rack: modular Ruby webserver interface

Details:

It was discovered that Rack incorrectly parse some headers.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2023-27539, CVE-2024-26141, CVE-2024-26146)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.10:
  ruby-rack                       2.2.4-3ubuntu0.1

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-6689-1
  CVE-2023-27539, CVE-2024-26141, CVE-2024-26146

Package Information:
  https://launchpad.net/ubuntu/+source/ruby-rack/2.2.4-3ubuntu0.1


--3MwIy2ne0vdjdPXF
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=G6Sb
-----END PGP SIGNATURE-----

--3MwIy2ne0vdjdPXF--


--===============7369728684590235606==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline


--===============7369728684590235606==--