Stay Secure with the Latest Linux Advisories

security advisorysoftware patchmageia

Mageia 7: MGASA-2020-0306 Moderate: Ruby-Rack Cookie Issue

A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3 that makes it is possible for an attacker to forge a secure or host-only cookie prefix (CVE-2020-8184). References: . MGASA-2020-0306 - Updated ruby-rack packages fix security vulnerability Publication date: 31 Jul 2020 URL: https://advisories.mageia.org/MGASA-2020-0306.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-8184 A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3 that makes it is possible for an attacker to forge a secure or host-only cookie prefix (CVE-2020-8184). References: - https://bugs.mageia.org/show_bug.cgi?id=26952 - https://lists.debian.org/debian-lts-announce/2020/07/msg00006.html - https://www.cve.org/CVERecord?id=CVE-2020-8184 SRPMS: - 7/core/ruby-rack-2.0.8-2.mga7 . Mageia 2020-0306 resolves an issue with cookie validation in ruby-rack packages. Users with affected systems should apply the update.. mageia security advisory,ruby-rack cookie flaw,mageia update,security patch. . LinuxSecurity.com Team

Jul 31, 2020 Mageia