Alpine/ruby: medium 5.8
An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A malicious FTP server can use the PASV response to trick Net::FTP into connecting back to a given IP address
Action: Upgrade ruby to 2.7.4-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.7.0 | 2.7.4-r0 | - |
Fixed versions
| 2.7.4-r0 |
Sources
published · modified · JSON