DSA-5530: -1 ruby-rack -- security update

Published Oct 22, 2023

Updated

ruby-rack - security update

Other sources

Several vulnerabilities were discovered in ruby-rack, a modular Ruby webserver interface, which may result in denial of service and shell escape sequence injection.

Affected Software

2 affected components

debian/ruby-rack

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ruby-rack to a version that resolves this vulnerability.
Patch DSA-5530-1

Event History

Oct 22, 2023

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

What is the vulnerability ID for this security update?

The vulnerability ID for this security update is DSA-5530.

What software is affected by this vulnerability?

The software affected by this vulnerability is ruby-rack.

What are the risks associated with this vulnerability?

The risks associated with this vulnerability include denial of service and shell escape sequence injection.

Where can I find more information about this security update?

You can find more information about this security update in the Debian bug reports: [Bug 1029832](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1029832), [Bug 1032803](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1032803), [Bug 1033264](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1033264).

How can I fix this vulnerability?

To fix this vulnerability, you should update ruby-rack to the latest version available.