The vulnerability of the TZInfo time zone library, related to deficiencies in path name limitation, allows a violator to trigger a service failure.

The vulnerability of the TZInfo time zone database is related to deficiencies in path name limitation for accessing the catalog. Exploiting this vulnerability could allow a malicious actor to cause service failures...

DEBIAN-CVE-2022-31163

TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path traversal. With the Ruby data source,...