OPENSUSE-SU-2019:1344-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 08 May 2019, 07:43
Last modified:04 Feb 2026, 02:41

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

08 May 2019, 07:43
Published
Vulnerability first disclosed
04 Feb 2026, 02:41
Last Modified
Vulnerability information updated

Description

Security update for rubygem-actionpack-5_1 This update for rubygem-actionpack-5_1 fixes the following issues: Security issues fixed: - CVE-2019-5418: Fixed a file content disclosure vulnerability in Action View which could be exploited via specially crafted accept headers in combination with calls to render file (bsc#1129272). - CVE-2019-5419: Fixed a resource exhaustion issue in Action View which could make the server unable to process requests (bsc#1129271). This update was imported from the SUSE:SLE-15:Update update project.

Affected Systems

  • opensuse•rubygem-actionpack-5_1&distro=openSUSE Leap 15.0

    < 5.1.4-lp150.2.3.1

References (5)