ALT-PU-2023-1412: package gem-rack update to version 2.2.6.3-alt1
Описание
This update upgrades gem-rack to version 2.2.6.3-alt1.
Устраненные уязвимости6
Ссылки4
GHSA-hxqx-xwvh-44m2
https://github.com/advisories/GHSA-hxqx-xwvh-44m2GHSA-j6w9-fv6q-3q52
https://github.com/advisories/GHSA-j6w9-fv6q-3q52GHSA-wq4h-7r42-5hrr
https://github.com/advisories/GHSA-wq4h-7r42-5hrrСвязанные уязвимости
ALT-PU-2023-4276: package `gem-rack` update to version 2.2.6.3-alt1
A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix.
A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix.
A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix.