Stay Secure with the Latest Linux Advisories

security advisorycriticaldebian

Debian: DSA-4930-1 Urgent: python-django Security Vulnerability

Improper pathname handling in ruby-rack-cors, a middleware that makes Rack-based apps CORS compatible, may result in access to private resources. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-4918-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Salvatore Bonaccorso May 18, 2021 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : ruby-rack-corsCVE ID : CVE-2019-18978 Debian Bug : 944849 Improper pathname handling in ruby-rack-cors, a middleware that makes Rack-based apps CORS compatible, may result in access to private resources. For the stable distribution (buster), this problem has been fixed in version 1.0.2-1+deb10u1. We recommend that you upgrade your ruby-rack-cors packages. For the detailed security status of ruby-rack-cors please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/ruby-rack-cors Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Tackling inadequate pathname management in ruby-rack-cors to bolster application protection against illicit entry.. ruby-rack-cors Update, Debian Advisory, Rack Middleware Security. . Severity: Critical. LinuxSecurity.com Team

May 18, 2021 •Critical Debian