Описание
Security update for rubygem-rake
This update for rubygem-rake fixes the following issues:
- CVE-2020-8130: Fixed a command injection when supplying a filename that began with the pipe character (bsc#1164804).
Список пакетов
SUSE Linux Enterprise Module for Containers 12
ruby2.1-rubygem-rake-10.3.2-9.7.1
Ссылки
- Link for SUSE-SU-2022:3212-1
- E-Mail link for SUSE-SU-2022:3212-1
- SUSE Security Ratings
- SUSE Bug 1164804
- SUSE CVE CVE-2020-8130 page
Описание
There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`.
Затронутые продукты
SUSE Linux Enterprise Module for Containers 12:ruby2.1-rubygem-rake-10.3.2-9.7.1
Ссылки
- CVE-2020-8130
- SUSE Bug 1164804