Skip to content
OpenAdvisories
High DLA-3866-1 1 CVE

ruby-tzinfo - security update

Published Sep 3, 2024 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 11 ruby-tzinfo 1.2.6-1+deb11u1

Vulnerabilities 1

  • High 7.5

    TZInfo relative path traversal vulnerability allows loading of arbitrary files

    TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path…