[ubuntu/noble-security] ruby-webrick 1.8.1-1ubuntu0.1 (Accepted)

Marc Deslauriers marc.deslauriers at canonical.com
Mon Oct 7 11:22:59 UTC 2024


ruby-webrick (1.8.1-1ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: HTTP request smuggling via both a Content-Length
    header and a Transfer-Encoding header
    - debian/patches/CVE-2024-47220.patch: check for both headers in
      lib/webrick/httprequest.rb, test/webrick/test_httprequest.rb.
    - CVE-2024-47220

Date: 2024-10-04 12:20:11.378714+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/ruby-webrick/1.8.1-1ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.


More information about the noble-changes mailing list