Alerts This Week
Warning Icon 1 483
Alerts This Week
Warning Icon 1 483

Ubuntu 16.04 LTS: USN-4571-1 Moderate: rack-cors Network Threat

ubuntu
Calendar Grey October 5, 2020
Dist Ubuntu Esm H88
Ubuntu Security Announcement USN-4570-2 concerns a vulnerability in rack-cors that may permit unauthorized access to network files.
rack-cors would allow unintended access to files over the network.

Summary

rack-cors would allow unintended access to files over the network.

Software Description:

- ruby-rack-cors: provides support for Cross-Origin Resource Sharing (CORS) for

Rack compatible web applications

Details:

It was discovered that rack-cors did not properly handle relative file

paths. An attacker could use this vulnerability to access arbitrary files.

Topics%20covered

Topics Covered

security advisory ubuntu network threat unintended access rack-cors

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  ruby-rack-cors                  0.4.0-1+deb9u2build0.16.04.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4571-1

CVE-2019-18978

October 05, 2020

Topics%20covered

Topics Covered

security advisory ubuntu network threat unintended access rack-cors

Package Information

https://launchpad.net/ubuntu/+source/ruby-rack-cors/0.4.0-1+deb9u2build0.16.04.1
--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here