Описание
ELSA-2023-12137: pcs security update (MODERATE)
[0.10.14-5.0.1]
- Replace HAM-logo.png with a generic one
[0.10.14-5.el8_7.2]
- Updated bundled rubygems: mustermann, rack, rack_protection, sinatra, tilt
- Added license for rubygem ruby2_keywords
- Resolves: rhbz#2159424
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
pcs
0.10.14-5.0.1.el8_7.2
pcs-snmp
0.10.14-5.0.1.el8_7.2
Oracle Linux x86_64
pcs
0.10.14-5.0.1.el8_7.2
pcs-snmp
0.10.14-5.0.1.el8_7.2
Связанные CVE
Связанные уязвимости
Sinatra is a domain-specific language for creating web applications in Ruby. An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 before 3.0.4. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a response when the filename is derived from user-supplied input. Version 2.2.3 and 3.0.4 contain patches for this issue.
Sinatra is a domain-specific language for creating web applications in Ruby. An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 before 3.0.4. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a response when the filename is derived from user-supplied input. Version 2.2.3 and 3.0.4 contain patches for this issue.
Sinatra is a domain-specific language for creating web applications in Ruby. An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 before 3.0.4. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a response when the filename is derived from user-supplied input. Version 2.2.3 and 3.0.4 contain patches for this issue.
Sinatra is a domain-specific language for creating web applications in ...
Sinatra vulnerable to Reflected File Download attack