OPENSUSE-SU-2019:1344-1: rubygem-actionpack-5_1&distro=openSUSE Leap 15.0 openSUSE

Published

Published 08-05-2019Last modified 04-02-2026

Vulnerability summary

OPENSUSE-SU-2019:1344-1 is a vulnerability in rubygem-actionpack-5_1&distro=openSUSE Leap 15.0 openSUSE with no CVSS score yet.

Priority

Insufficient evidence

No CVSS vector published; no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

Not scored

010

No CVSS score recorded

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 2 · Downstream 0 · Related 2

CVE-2019-5418 CVE-2019-5419

Timeline

08-05-2019
PublishedVulnerability first disclosed.
04-02-2026
Last modifiedVulnerability information updated.

Description

Security update for rubygem-actionpack-5_1 This update for rubygem-actionpack-5_1 fixes the following issues: Security issues fixed: - CVE-2019-5418: Fixed a file content disclosure vulnerability in Action View which could be exploited via specially crafted accept headers in combination with calls to render file (bsc#1129272). - CVE-2019-5419: Fixed a resource exhaustion issue in Action View which could make the server unable to process requests (bsc#1129271). This update was imported from the SUSE:SLE-15:Update update project.