Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2019-4180

Высокий

ALT-PU-2019-4180: package passenger update to version 6.0.2-alt1

Источник
errata.altlinux.org
Дата публикации
01.09.2019
Дата обновления
01.09.2019
Устраненные уязвимости
4

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades passenger to version 6.0.2-alt1.

Устраненные уязвимости4

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 9 лет назад

In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the privileges of the passenger user.

CVSS3: 5.5
redhat
около 10 лет назад

In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the privileges of the passenger user.

CVSS3: 7.8
nvd
больше 9 лет назад

In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the privileges of the passenger user.

CVSS3: 7.8
debian
больше 9 лет назад

In Phusion Passenger before 5.1.0, a known /tmp filename was used duri ...

CVSS3: 7.8
github
около 8 лет назад

Phusion Passenger uses a known /tmp filename