SUSE-SU-2016:0042-1: rubygem-passenger&distro=SUSE Lifecycle Management Server 1.3 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2016:0042-1 is a vulnerability in rubygem-passenger&distro=SUSE Lifecycle Management Server 1.3 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 07-01-2016
   PublishedVulnerability first disclosed.
2. 04-02-2026
   Last modifiedVulnerability information updated.

Description

Security update for rubygem-passenger This update fixes the following security issues: - CVE-2015-7519: Passenger is not filtering environment like apache is doing (bnc#956281) - CVE-2013-4136: Fixed security issue Passenger would reuse existing server instance directories (temporary directories) which could cause Passenger to remove or overwrite files belonging to other instances. Solution: If the server instance directory already exists, it will now be removed first in order get correct directory permissions. If the directory still exists after removal, Phusion Passenger aborts to avoid writing to a directory with unexpected permissions.(bnc#919726) - CVE-2013-2119: Fixed security issue related with incorrect temporary file usage (bnc#828005)

No weakness data has been published for this record.