Univention Bugzilla – Bug 52189
ruby2.3: Multiple issues (4.4)
Last modified: 2020-10-07 14:32:06 CEST
New Debian ruby2.3 2.3.3-1+deb9u9 fixes: This update addresses the following issue(s): * * potential HTTP request smuggling in WEBrick (CVE-2020-25613)
--- mirror/ftp/4.4/unmaintained/4.4-6/source/ruby2.3_2.3.3-1+deb9u8.dsc +++ apt/ucs_4.4-0-errata4.4-6/source/ruby2.3_2.3.3-1+deb9u9.dsc @@ -1,3 +1,9 @@ +2.3.3-1+deb9u9 [Thu, 01 Oct 2020 18:54:55 +0530] Utkarsh Gupta <utkarsh@debian.org>: + + * Non-maintainer upload by the LTS team. + * Add patch to fix a potential HTTP request smuggling + vulnerability in WEBrick. (Fixes: CVE-2020-25613) + 2.3.3-1+deb9u8 [Fri, 05 Jun 2020 14:25:50 +0530] Utkarsh Gupta <utkarsh@debian.org>: * Non-maintainer upload. <http://10.200.17.11/4.4-6/#1230547813018506368>
OK: yaml OK: announce_errata OK: patch OK: piuparts [4.4-6] c1f15ceeb4 Bug #52189: ruby2.3 2.3.3-1+deb9u9 doc/errata/staging/ruby2.3.yaml | 12 ++++++++++++ 1 file changed, 12 insertions(+)
<https://errata.software-univention.de/#/?erratum=4.4x761>