The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.3.1-2~ubuntu16.04.16+esm4", "binary_name": "libruby2.3" }, { "binary_version": "2.3.1-2~ubuntu16.04.16+esm4", "binary_name": "libruby2.3-dbg" }, { "binary_version": "2.3.1-2~ubuntu16.04.16+esm4", "binary_name": "libruby2.3-dbgsym" }, { "binary_version": "2.3.1-2~ubuntu16.04.16+esm4", "binary_name": "ruby2.3" }, { "binary_version": "2.3.1-2~ubuntu16.04.16+esm4", "binary_name": "ruby2.3-dbgsym" }, { "binary_version": "2.3.1-2~ubuntu16.04.16+esm4", "binary_name": "ruby2.3-dev" }, { "binary_version": "2.3.1-2~ubuntu16.04.16+esm4", "binary_name": "ruby2.3-dev-dbgsym" }, { "binary_version": "2.3.1-2~ubuntu16.04.16+esm4", "binary_name": "ruby2.3-doc" }, { "binary_version": "2.3.1-2~ubuntu16.04.16+esm4", "binary_name": "ruby2.3-tcltk" }, { "binary_version": "2.3.1-2~ubuntu16.04.16+esm4", "binary_name": "ruby2.3-tcltk-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.5.1-1ubuntu1.13", "binary_name": "libruby2.5" }, { "binary_version": "2.5.1-1ubuntu1.13", "binary_name": "libruby2.5-dbgsym" }, { "binary_version": "2.5.1-1ubuntu1.13", "binary_name": "ruby2.5" }, { "binary_version": "2.5.1-1ubuntu1.13", "binary_name": "ruby2.5-dbgsym" }, { "binary_version": "2.5.1-1ubuntu1.13", "binary_name": "ruby2.5-dev" }, { "binary_version": "2.5.1-1ubuntu1.13", "binary_name": "ruby2.5-doc" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.7.0-5ubuntu1.8", "binary_name": "libruby2.7" }, { "binary_version": "2.7.0-5ubuntu1.8", "binary_name": "libruby2.7-dbgsym" }, { "binary_version": "2.7.0-5ubuntu1.8", "binary_name": "ruby2.7" }, { "binary_version": "2.7.0-5ubuntu1.8", "binary_name": "ruby2.7-dbgsym" }, { "binary_version": "2.7.0-5ubuntu1.8", "binary_name": "ruby2.7-dev" }, { "binary_version": "2.7.0-5ubuntu1.8", "binary_name": "ruby2.7-doc" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "3.0.2-7ubuntu2.3", "binary_name": "libruby3.0" }, { "binary_version": "3.0.2-7ubuntu2.3", "binary_name": "libruby3.0-dbgsym" }, { "binary_version": "3.0.2-7ubuntu2.3", "binary_name": "ruby3.0" }, { "binary_version": "3.0.2-7ubuntu2.3", "binary_name": "ruby3.0-dbgsym" }, { "binary_version": "3.0.2-7ubuntu2.3", "binary_name": "ruby3.0-dev" }, { "binary_version": "3.0.2-7ubuntu2.3", "binary_name": "ruby3.0-doc" } ] }