ALT-PU-2023-1336: package gem-rails update to version 6.1.7.1-alt1
Описание
This update upgrades gem-rails to version 6.1.7.1-alt1.
Устраненные уязвимости10
Ссылки6
GHSA-579w-22j4-4749
https://github.com/advisories/GHSA-579w-22j4-4749GHSA-8xww-x3g3-6jcv
https://github.com/advisories/GHSA-8xww-x3g3-6jcvGHSA-hq7p-j377-6v63
https://github.com/advisories/GHSA-hq7p-j377-6v63GHSA-j6gc-792m-qgm2
https://github.com/advisories/GHSA-j6gc-792m-qgm2GHSA-p84v-45xj-wwqj
https://github.com/advisories/GHSA-p84v-45xj-wwqjСвязанные уязвимости
ALT-PU-2023-4268: package `gem-rails` update to version 6.1.7.1-alt1.1
A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service.
A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service.
A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service.