Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

rubygem-rack-cache: information leak

Package(s):

rubygem-rack-cache

CVE #(s):

Created:

June 6, 2012

Updated:

June 6, 2012

Description:

From the Red Hat bugzilla:

The Rack::Cache rubygem has a flaw where it will cache sensitive headers (such as Set-Cookie response headers), which could leak potentially sensitive information.

Alerts:

Fedora

FEDORA-2012-8439

2012-06-05

(Log in to post comments)