tocsin

Debian/jruby: medium 5.8

An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A malicious FTP server can use the PASV response to trick Net::FTP into connecting back to a given IP address

Action: Upgrade jruby to 9.3.9.0+ds-1 or later.

Affected

introducedfixedlast affected
09.3.9.0+ds-1-

Fixed versions

9.3.9.0+ds-1

Sources

published · modified · JSON