ALT-PU-2020-2321: package gem-rails update to version 5.2.4.3-alt1
Описание
This update upgrades gem-rails to version 5.2.4.3-alt1.
Устраненные уязвимости10
Ссылки6
GHSA-2p68-f74v-9wc6
https://github.com/advisories/GHSA-2p68-f74v-9wc6GHSA-8727-m6gj-mc37
https://github.com/advisories/GHSA-8727-m6gj-mc37GHSA-jp5v-5gx4-jmj9
https://github.com/advisories/GHSA-jp5v-5gx4-jmj9GHSA-m42x-37p3-fv5w
https://github.com/advisories/GHSA-m42x-37p3-fv5wGHSA-xq5j-gw7f-jgj8
https://github.com/advisories/GHSA-xq5j-gw7f-jgj8Связанные уязвимости
A client side enforcement of server side security vulnerability exists in rails < 5.2.4.2 and rails < 6.0.3.1 ActiveStorage's S3 adapter that allows the Content-Length of a direct file upload to be modified by an end user bypassing upload limits.
A client side enforcement of server side security vulnerability exists in rails < 5.2.4.2 and rails < 6.0.3.1 ActiveStorage's S3 adapter that allows the Content-Length of a direct file upload to be modified by an end user bypassing upload limits.
A client side enforcement of server side security vulnerability exists in rails < 5.2.4.2 and rails < 6.0.3.1 ActiveStorage's S3 adapter that allows the Content-Length of a direct file upload to be modified by an end user bypassing upload limits.
A client side enforcement of server side security vulnerability exists ...
