Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 519
Alerts This Week
Warning Icon 1 519

SUSE: 2018:2217-1 Moderate Advisory: rubygem-sprockets-2_12 Path Traversal

suse
Calendar Grey August 6, 2018
Scroller Suse
SUSE has released a security update addressing a critical directory traversal flaw in rubygem-sprockets-2_12 for SUSE OpenStack Cloud.
An update that fixes one vulnerability is now available

Summary

This update for rubygem-sprockets-2_12 fixes the following issues: Security issue fixed: - CVE-2018-3760: Fix path traversal in sprockets/server.rb:forbidden_request?() that can allow remote attackers to read arbitrary files (bsc#1098369). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud 7: zypper in -t patch SUSE-OpenStack-Cloud-7-2018-1500=1 Package List: - SUSE OpenStack Cloud 7 (aarch64 s390x x86_64): ruby2.1-rubygem-sprockets-2_12-2.12.5-1.3.1

Topics%20covered

Topics Covered

security advisory moderate path traversal suse openstack cloud rubygem sprockets

References

#1098369

Cross- CVE-2018-3760

Affected Products:

SUSE OpenStack Cloud 7

https://www.suse.com/security/cve/CVE-2018-3760.html

https://bugzilla.suse.com/1098369

Announcement ID: SUSE-SU-2018:2217-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate path traversal suse openstack cloud rubygem sprockets

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.