New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CVE-2024-27280 #158

Closed

mvach opened this issue Apr 9, 2024 · 1 comment

Contributor

mvach commented Apr 9, 2024 •

edited

Loading

The AWS CPI seems to be affected by https://www.ruby-lang.org/en/news/2024/03/21/buffer-overread-cve-2024-27280
Even though the issue doesn't seem to be critical we should update the used Ruby version to 3.2.3

cf-foundation-community-automation bot added this to Foundational Infrastructure Working Group

cf-foundation-community-automation bot moved this to Inbox in Foundational Infrastructure Working Group

mvach mentioned this issue

Update Ruby to version 3.2.3 #159

Merged

Member

beyhan commented Apr 11, 2024

fixed with #159

beyhan closed this as completed

github-project-automation bot moved this from Inbox to Done in Foundational Infrastructure Working Group

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment