ALAS-2017-915: CVEs fixed (Amazon Linux)

ALAS-2017-915 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2017-14064 CRITICAL 9.8 UPGRADE MITIGATE Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory during a JSON.gen
• CVE-2017-0899 CRITICAL 9.8 UPGRADE MITIGATE RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include termi

Applies to

• Amazon Linux 1

← Back to latest CVEs