==========================================================================
Ubuntu Security Notice USN-7646-1 July 17, 2025 rails vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Rails could be made to expose sensitive information over the network. Software Description: - rails: MVC ruby based framework geared for web application development Details: It was discovered that Rails did not correctly handle headers. An attacker could potentially use this issue to view arbitrary files on a target server. (CVE-2019-5418) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS rails 2:4.2.10-0ubuntu4+esm2 Available with Ubuntu Pro ruby-actionpack 2:4.2.10-0ubuntu4+esm2 Available with Ubuntu Pro ruby-actionview 2:4.2.10-0ubuntu4+esm2 Available with Ubuntu Pro Ubuntu 16.04 LTS rails 2:4.2.6-1ubuntu0.1~esm2 Available with Ubuntu Pro ruby-actionpack 2:4.2.6-1ubuntu0.1~esm2 Available with Ubuntu Pro ruby-actionview 2:4.2.6-1ubuntu0.1~esm2 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References:https://ubuntu.com/security/notices/USN-7646-1 <https://ubuntu.com/security/notices/USN-7646-1>
CVE-2019-5418
OpenPGP_0x401EFCBCDA0FF1BD.asc
Description: OpenPGP public key
OpenPGP_signature.asc
Description: OpenPGP digital signature
