Skip to content

Commit 56bd036

Browse files
authored
Merge pull request #2790 from meisyal/cgi-version-fix
Fix cgi gem version in CVE-2021-41816 news post (translations)
2 parents d0a1d0c + f035850 commit 56bd036

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

en/news/_posts/2021-11-24-buffer-overrun-in-cgi-escape_html-cve-2021-41816.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ We strongly recommend upgrading Ruby.
1616

1717
A security vulnerability that causes buffer overflow when you pass a very large string (> 700 MB) to `CGI.escape_html` on a platform where `long` type takes 4 bytes, typically, Windows.
1818

19-
Please update the cgi gem to version 0.3.1, 0.2,1, and 0.1,1 or later. You can use `gem update cgi` to update it. If you are using bundler, please add `gem "cgi", ">= 0.3.1"` to your `Gemfile`.
19+
Please update the cgi gem to version 0.3.1, 0.2.1, and 0.1.1 or later. You can use `gem update cgi` to update it. If you are using bundler, please add `gem "cgi", ">= 0.3.1"` to your `Gemfile`.
2020
Alternatively, please update Ruby to 2.7.5 or 3.0.3.
2121

2222
This issue has been introduced since Ruby 2.7, so the cgi version bundled with Ruby 2.6 is not vulnerable.

es/news/_posts/2021-11-24-buffer-overrun-in-cgi-escape_html-cve-2021-41816.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ Una vulnerabilidad de seguridad que causa desbordamientos de búfer cuando
2020
el usuario pasa una cadenas muy grande (> 700MB) a `CGI.escape_html` en
2121
una plataforma donde el tipo `long` emplee 4 bytes, tipicamente, Windows.
2222

23-
Por favor actualice la gema cgi a la versión 0.3.1, 0.2,1, y 0.1,1 o posterior.
23+
Por favor actualice la gema cgi a la versión 0.3.1, 0.2.1, y 0.1.1 o posterior.
2424
Puede usar `gem update cgi` para actualizarla. Si está usando bundler,
2525
por favor añada `gem "cgi", ">= 0.3.1"` a su archivo `Gemfile`.
2626
Alternativamente, por favor actualice Ruby a 2.7.5 o a 3.0.3.

0 commit comments

Comments
 (0)