File rubygem-rack-CVE-2024-26141.patch of Package rubygem-rack.32805
Index: rack-1.6.13/lib/rack/utils.rb =================================================================== --- rack-1.6.13.orig/lib/rack/utils.rb +++ rack-1.6.13/lib/rack/utils.rb @@ -437,6 +437,9 @@ module Rack end ranges << (r0..r1) if r0 <= r1 end + + return [] if ranges.map(&:size).sum > size + ranges end module_function :byte_ranges