Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Ubuntu 16.04 ESM USN-5806-1 Critical Ruby Input Vulnerability Alert

ubuntu
Calendar Grey January 17, 2023
Dist Ubuntu Esm H88
A critical advisory was released on January 17, 2023, about a Ruby vulnerability impacting Ubuntu 16.04 ESM, detailing essential updates for users to secure systems
Ruby could allow for internet traffic to be modified if a vulnerable application processed malicious user input.

Summary

Ruby could allow for internet traffic to be modified if

a vulnerable application processed malicious user input.

Software Description:

- ruby2.3: Object-oriented scripting language

Details:

Hiroshi Tokumaru discovered that Ruby did not properly handle certain

user input for applications which generate HTTP responses using cgi gem.

An attacker could possibly use this issue to maliciously modify the

response a user would receive from a vulnerable application.

Topics%20covered

Topics Covered

security advisory critical software update ubuntu ruby network threat input issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
   libruby2.3                      2.3.1-2~ubuntu16.04.16+esm4
   ruby2.3                         2.3.1-2~ubuntu16.04.16+esm4

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5806-1

  CVE-2021-33621

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-5806-1

Topics%20covered

Topics Covered

security advisory critical software update ubuntu ruby network threat input issue

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here