ALT-PU-2022-2630: package gem-rails update to version 6.1.6.1-alt1
Описание
This update upgrades gem-rails to version 6.1.6.1-alt1.
Устраненные уязвимости8
Ссылки7
GHSA-3hhc-qp5v-9p2j
https://github.com/advisories/GHSA-3hhc-qp5v-9p2jGHSA-ch3h-j2vf-95pv
https://github.com/advisories/GHSA-ch3h-j2vf-95pvGHSA-qphc-hf5q-v8fc
https://github.com/advisories/GHSA-qphc-hf5q-v8fcGHSA-rmj8-8hhh-gv5h
https://github.com/advisories/GHSA-rmj8-8hhh-gv5hGHSA-w749-p3v6-hccq
https://github.com/advisories/GHSA-w749-p3v6-hccqGHSA-wh98-p28r-vrc9
https://github.com/advisories/GHSA-wh98-p28r-vrc9Связанные уязвимости
ALT-PU-2023-4268: package `gem-rails` update to version 6.1.7.1-alt1.1
A open redirect vulnerability exists in Action Pack >= 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website.
A open redirect vulnerability exists in Action Pack >= 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website.
A open redirect vulnerability exists in Action Pack >= 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website.
A open redirect vulnerability exists in Action Pack >= 6.0.0 that coul ...