[ubuntu/noble-security] ruby-webrick 1.8.1-1ubuntu0.1 (Accepted)
Marc Deslauriers
marc.deslauriers at canonical.com
Mon Oct 7 11:22:59 UTC 2024
ruby-webrick (1.8.1-1ubuntu0.1) noble-security; urgency=medium
* SECURITY UPDATE: HTTP request smuggling via both a Content-Length
header and a Transfer-Encoding header
- debian/patches/CVE-2024-47220.patch: check for both headers in
lib/webrick/httprequest.rb, test/webrick/test_httprequest.rb.
- CVE-2024-47220
Date: 2024-10-04 12:20:11.378714+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/ruby-webrick/1.8.1-1ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the noble-changes
mailing list