Skip to content
OpenAdvisories
Medium DLA-2070-1 1 CVE

ruby-excon - security update

Published Jan 19, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 ruby-excon 0.33.0-2+deb8u1

Vulnerabilities 1

  • Medium 5.8
    CVE-2019-16779

    In RubyGem excon, interrupted Persistent Connections May Leak Response Data

    In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as by a timeout) would leave data on the socket. Subsequent requests would then read this data, returning content from the …

    excon excon ruby-excon excon Debian Ubuntu RubyGems