tocsin

Alpine/ruby: high 7.5

In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, an attacker controlling the unpacking format (similar to format string vulnerabilities) can trigg

Action: Upgrade ruby to 2.4.4-r0 or later.

Affected

introducedfixedlast affected
2.2.02.4.4-r0-

Fixed versions

2.4.4-r0

Sources

published · modified · JSON