Alerts This Week
Warning Icon 1 1,149
Alerts This Week
Warning Icon 1 1,149

Debian: DLA-2070-1 Critical Advisory on Ruby-Excon Race Condition

debian lts
Calendar Grey January 19, 2020
Dist Debian Esm H88
Critical advisory DLA-2070-1 for ruby-excon addresses race condition in persistent connections.
In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as by a timeout) would leave data on the soc...
Topics%20covered

Topics Covered

security advisory debian race condition socket issue ruby-excon

Summary

For Debian 8 "Jessie", this problem has been fixed in version
0.33.0-2+deb8u1.

We recommend that you upgrade your ruby-excon packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: ruby-excon
Version: 0.33.0-2+deb8u1
CVE ID: CVE-2019-16779
Debian Bug: 946904

Topics%20covered

Topics Covered

security advisory debian race condition socket issue ruby-excon

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here