Add CVE-2018-16470/ruby-rack

The issue only affects the exerimental version as the issue has been
introducing in 2.0.4. The fix consist of just reverting the introducing
commit.

https://www.openwall.com/lists/oss-security/2018/11/05/1