# ruby-rack-session security updates

Patch Radar has 5 security fixes for ruby-rack-session, closing 2 CVEs. The newest is ruby-rack-session 2.1.1-0.1ubuntu0.1 (2.1.1-0.1ubuntu0.1), released April 30, 2026.

- Web page: https://patchblox.com/security/product/linux/ruby-rack-session
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [ruby-rack-session 2.1.1-0.1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-ruby-rack-session-2.1.1-0.1ubuntu0.1.md) | Apr 30, 2026 | Ubuntu 25.10 (questing) 2.1.1-0.1ubuntu0.1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-39324](https://patchblox.com/security/data/fix/linux/debian-cve-2026-39324.md) | Apr 7, 2026 | Debian 14 2.1.1-0.2 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-39324](https://patchblox.com/security/data/fix/linux/debian-cve-2026-39324.md) | Apr 7, 2026 | Debian 13.5 (trixie) 2.1.1-0.1+deb13u1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2025-46336](https://patchblox.com/security/data/fix/linux/debian-cve-2025-46336.md) | May 8, 2025 | Debian 13.5 (trixie) 2.1.1-0.1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-46336](https://patchblox.com/security/data/fix/linux/debian-cve-2025-46336.md) | May 8, 2025 | Debian 14 2.1.1-0.1 | Routine | 1 | 0 |

---

Data as of 2026-11-06T17:00:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo