tocsin

Alpine/ruby: high 7.5

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who have issued a `query` command.

Action: Upgrade ruby to 2.3.5-r0 or later.

Affected

introducedfixedlast affected
02.3.5-r0-

Fixed versions

2.3.5-r0

Sources

published · modified · JSON