AVG-2555 log
| Package | ruby |
| Status | Fixed |
| Severity | Medium |
| Type | multiple issues |
| Affected | 3.0.2-2 |
| Fixed | 3.0.3-1 |
| Current | 3.3.5-2 [extra] |
| Ticket | None |
| Created | Mon Nov 15 10:28:14 2021 |
| Issue | Severity | Remote | Type | Description |
|---|---|---|---|---|
| CVE-2021-41819 | Medium | Yes | Content spoofing | A security issue has been found in Ruby before versions 3.0.3, 2.7.5 and 2.6.9. A cookie prefix spoofing vulnerability was discovered in CGI::Cookie.parse... |
| CVE-2021-41817 | Low | Yes | Denial of service | A security issue has been found in Ruby before versions 3.0.3, 2.7.5 and 2.6.9. In the Ruby "date" gem before versions 3.2.1, 3.1.2, 3.0.2, and 2.0.1, there... |