ALT-PU-2017-2195: package ruby update to version 2.4.1-alt1
Описание
This update upgrades ruby to version 2.4.1-alt1.
Устраненные уязвимости6
Ссылки5
GHSA-73w7-6w9g-gc8w
https://github.com/advisories/GHSA-73w7-6w9g-gc8wGHSA-7gcp-2gmq-w3xh
https://github.com/advisories/GHSA-7gcp-2gmq-w3xhGHSA-p7f2-rr42-m9xm
https://github.com/advisories/GHSA-p7f2-rr42-m9xmGHSA-pm9x-4392-2c2p
https://github.com/advisories/GHSA-pm9x-4392-2c2pСвязанные уязвимости
Net::SMTP in Ruby before 2.4.0 is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring.
Net::SMTP in Ruby before 2.4.0 is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring.
Net::SMTP in Ruby before 2.4.0 is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring.