Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:3259-1

Опубликовано: 12 сент. 2022
Источник: suse-cvrf

Описание

Security update for rubygem-kramdown

This update for rubygem-kramdown fixes the following issues:

  • CVE-2020-14001: Fixed processing template options inside documents allowing unintended read access or embedded Ruby code execution (bsc#1174297).

Список пакетов

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP2-SAP-Azure
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP2-SAP-BYOS-Azure
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP2-SAP-BYOS-EC2-HVM
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP2-SAP-BYOS-GCE
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP2-SAP-EC2-HVM
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP2-SAP-GCE
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP3-SAP-BYOS-Azure
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP3-SAP-BYOS-EC2-HVM
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP3-SAP-BYOS-GCE
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP4-SAP-Azure-LI-BYOS
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP4-SAP-Azure-LI-BYOS-Production
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP4-SAP-BYOS
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP4-SAP-BYOS-Azure
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP4-SAP-BYOS-EC2
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP4-SAP-BYOS-GCE
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP4-SAP-Hardened
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP4-SAP-Hardened-Azure
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP4-SAP-Hardened-BYOS
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP4-SAP-Hardened-BYOS-Azure
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP4-SAP-Hardened-BYOS-EC2
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP4-SAP-Hardened-BYOS-GCE
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP4-SAP-Hardened-EC2
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP4-SAP-Hardened-GCE
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP5-SAP-Azure-3P
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP5-SAP-Azure-LI-BYOS
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP5-SAP-Azure-LI-BYOS-Production
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP5-SAP-Azure-VLI-BYOS
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP5-SAP-BYOS-Azure
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP5-SAP-BYOS-EC2
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP5-SAP-BYOS-GCE
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP5-SAP-Hardened-Azure
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP5-SAP-Hardened-BYOS-Azure
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP5-SAP-Hardened-BYOS-EC2
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP5-SAP-Hardened-BYOS-GCE
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP5-SAP-Hardened-EC2
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP5-SAP-Hardened-GCE
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP6-SAP-Azure-LI-BYOS
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP6-SAP-Azure-LI-BYOS-Production
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP6-SAP-Azure-VLI-BYOS
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP6-SAP-BYOS
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP6-SAP-BYOS-Azure
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP6-SAP-BYOS-EC2
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP6-SAP-BYOS-GCE
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP6-SAP-Hardened
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP6-SAP-Hardened-Azure
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP6-SAP-Hardened-BYOS
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP6-SAP-Hardened-BYOS-Azure
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP6-SAP-Hardened-BYOS-EC2
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP6-SAP-Hardened-BYOS-GCE
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP6-SAP-Hardened-EC2
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP6-SAP-Hardened-GCE
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
SUSE Linux Enterprise High Availability Extension 15
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
SUSE Linux Enterprise High Availability Extension 15 SP1
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
SUSE Linux Enterprise High Availability Extension 15 SP2
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
SUSE Linux Enterprise High Availability Extension 15 SP3
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
SUSE Linux Enterprise High Availability Extension 15 SP4
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
openSUSE Leap 15.3
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
ruby2.5-rubygem-kramdown-doc-1.15.0-150000.3.3.1
ruby2.5-rubygem-kramdown-testsuite-1.15.0-150000.3.3.1
openSUSE Leap 15.4
ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
ruby2.5-rubygem-kramdown-doc-1.15.0-150000.3.3.1
ruby2.5-rubygem-kramdown-testsuite-1.15.0-150000.3.3.1

Ссылки

Описание

The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows unintended read access (such as template="/etc/passwd") or unintended embedded Ruby code execution (such as a string that begins with template="string://<%= `). NOTE: kramdown is used in Jekyll, GitLab Pages, GitHub Pages, and Thredded Forum.

Затронутые продукты
Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1
Ссылки
Уязвимость SUSE-SU-2022:3259-1