Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Debian 9 Stretch DLA-2389-1: Critical ruby-rack-cors Directory Traversal

debian lts
Calendar Grey October 1, 2020
Dist Debian Esm H88
Upgrade ruby-rack-cors to address directory traversal vulnerabilities on Debian LTS for improved security.
This package allowed ../ directory traversal to access private resources because resource matching did not ensure that pathnames were in a canonical format
Topics%20covered

Topics Covered

security advisory update debian directory traversal resource access ruby-rack-cors

Summary

For Debian 9 stretch, this problem has been fixed in version
0.4.0-1+deb9u2.

We recommend that you upgrade your ruby-rack-cors packages.

For the detailed security status of ruby-rack-cors please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/ruby-rack-cors
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: ruby-rack-corsVersion : 0.4.0-1+deb9u2
CVE ID: CVE-2019-18978
Debian Bug: 944849

Topics%20covered

Topics Covered

security advisory update debian directory traversal resource access ruby-rack-cors

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here