Summary
USN-8190-1 fixed a vulnerability in Rack::Session. This update provides the
corresponding update for Ubuntu 26.04 LTS.
Original advisory details:
SeungMyung Lee discovered that Rack::Session did not properly reject
cookies upon decryption failure. A remote attacker could use this issue to
manipulate session contents and possibly gain unauthorized access.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 26.04 LTS 26.04:LTS | ruby-rack-session | 2.1.1-0.1ubuntu0.26.04.1 |
References
-
report
https://ubuntu.com/security/CVE-2026-39324