A ruby-tzinfo security update has been released for Debian GNU/Linux 9 Extended LTS to address a potential directory traversal vulnerability.
ELA-671-1 ruby-tzinfo security update
Package ruby-tzinfo
ELA-671-1 ruby-tzinfo security update
Version 1.2.2-2+deb9u1 (stretch)
Related CVEs CVE-2022-31163
It was discovered that there was a potential directory traversal vulnerablilty in ruby-tzinfo, a timezone library for the Ruby programming language.
For Debian 9 stretch, these problems have been fixed in version 1.2.2-2+deb9u1.
We recommend that you upgrade your ruby-tzinfo packages.
Further information about Extended LTS security advisories can be found at: https://deb.freexian.com/extended-lts/
