| Name | DSA-6048-1 | 
| Description | ruby-rack - security update | 
| Source | Debian | 
| References | CVE-2025-61770, CVE-2025-61771, CVE-2025-61772, CVE-2025-61780, CVE-2025-61919 | 
The table below lists information on source packages.
| Source Package | Release | Version | Status | 
|---|---|---|---|
| ruby-rack (PTS) | bookworm | 2.2.13-1~deb12u1 | vulnerable | 
| bookworm (security) | 2.2.20-0+deb12u1 | fixed | |
| trixie | 3.1.16-0.1 | vulnerable | |
| trixie (security) | 3.1.18-1~deb13u1 | fixed | 
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs | 
|---|---|---|---|---|---|---|
| ruby-rack | source | bookworm | 2.2.20-0+deb12u1 | |||
| ruby-rack | source | trixie | 3.1.18-1~deb13u1 |