Debian Linux Security Advisory 2783-2 - The update of librack-ruby in DSA-2783-1 also addressed CVE-2013-0183. The patch applied breaks rails applications like redmine (see Debian Bug #727187). Updated packages are available to address this problem.
7166a2e1c6865221cfe34af826a8c7a766cf04432e78842feb087c02e0f3fe25
Debian Linux Security Advisory 2783-1 - Several vulnerabilities were discovered in Rack, a modular Ruby webserver interface.
3c392a1375e3aa987daddb2c193f9928f448bd6e8ece3459581735e59e24c6f5
Gentoo Linux Security Advisory 201203-5 - A hash collision vulnerability in Rack allows remote attackers to cause a Denial of Service condition. Versions less than 1.1.3 are affected.
9769e36f41607c430d74378f10b2dccc1250c0da0d459328c3cc7ad212bd778d