8000 CGI security fixes for old versions are not in repository · Issue #31 · ruby/cgi · GitHub
[go: up one dir, main page]
Skip to content
CGI security fixes for old versions are not in repository #31
New issue
New issue
Open
Open
CGI security fixes for old versions are not in repository#31
@headius

Description

@headius
headius
opened on Nov 23, 2022

We were informed today of the new CVE-2021-33621 and want to update the copy of cgi shipped with JRuby 9.3. Unfortunately Ruby 2.6 has not been patched and I cannot find the related branches for older versions of CGI anywhere.

What patch went into 0.1.0.2 and friends? Where are the branches for those release lines?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions
      0