Red Hat Security AdvisoryRHSA-2024:4542
ruby security update
Released 2024-07-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.2) ruby-doc-3.0.4-161.el9_2.1
- Red Hat Enterprise Linux AppStream EUS (v.9.2) ruby-3.0.4-161.el9_2.1, ruby-default-gems-3.0.4-161.el9_2.1, ruby-devel-3.0.4-161.el9_2.1 +18
Fixes 1 record
Priority MEDIUM 43
The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02452 · Published 2022-11-18 · Partial fix · 0.3.5, 0.2.2 +1 CWE-74
