Ruby RACK < 2.2.20 / 3.x < 3.1.18 / 3.2 < 3.2.3 Multiple Vulnerabilities

I have ran Nessus against our Librenms Server and it has picked up a High Vulnerability!–

Has anyone seen this before?

I do not think that is part of LibreNMS. When I execute ‘gem list | grep rack’ on my production LibreNMS instance, I come up with nothing.

My Oxidized server does, however, use Rack. I’ll be updating I guess.
$ gem list | grep rack
rack (3.1.13)
rack-protection (4.1.1)
rack-session (2.1.0)

Yes I have installed Oxidized, I will have a look to see if it needs an update.

I did a ‘gem update’ as root. Looks like there are breaking changes going from Oxidized 0.33 to 0.35. Now I have to fix. May be a Oxidized config file issue. Beware.

I had to revert to Oxidized 0.33 and Oxidized-web 0.16. When I have time I’ll tinker with it on my lab box.

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.