Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2021-1710

Высокий

ALT-PU-2021-1710: package ruby update to version 2.7.3-alt1.3

Источник
errata.altlinux.org
Дата публикации
24.04.2021
Дата обновления
04.02.2026
Устраненные уязвимости
3

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades ruby to version 2.7.3-alt1.3.

Устраненные уязвимости3

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 5 лет назад

In Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web application handles a parameter with TmpDir.

CVSS3: 7.5
nvd
больше 5 лет назад

In Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web application handles a parameter with TmpDir.

CVSS3: 7.5
debian
больше 5 лет назад

In Ruby through 3.0 on Windows, a remote attacker can submit a crafted ...

CVSS3: 7.5
ubuntu
больше 5 лет назад

The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.

CVSS3: 7.5
redhat
больше 5 лет назад

The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.