Stay Secure with the Latest Linux Advisories

security advisoryinformation leakcode execution

SUSE OpenStack Cloud 5: SUSE-SU-2016:0854-1 Important Remote Code Risk

An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available.. SUSE Security Update: Security update for rubygem-actionview-4_1 ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:0854-1 Rating: important References: #968849 #968850 Cross-References: CVE-2016-2097 CVE-2016-2098 Affected Products: SUSE OpenStack Cloud 5 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for rubygem-actionview-4_1 fixes the following issues: - CVE-2016-2097: rubygem-actionview: Possible Information Leak Vulnerability in Action View. (bsc#968850) - CVE-2016-2098: rubygem-actionpack: Possible remote code execution vulnerability in Action Pack (bsc#968849) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud 5: zypper in -t patch sleclo50sp3-rubygem-actionview-4_1-12467=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE OpenStack Cloud 5 (x86_64): ruby2.1-rubygem-actionview-4_1-4.1.9-12.1 References: https://www.suse.com/security/cve/CVE-2016-2097.html https://www.suse.com/security/cve/CVE-2016-2098.html https://bugzilla.suse.com/968849 https://bugzilla.suse.com/968850 . SUSE Security Notification: Security patch for rubygem-actionpack-5_2 Announcement ID:SUSE-SU-2019:0345-1. SUSE OpenStack, rubygem ActionView, security update. . Severity: Important. LinuxSecurity.com Team

Mar 22, 2016 •Important SuSE