Описание
Security update for rubygem-actionpack-5_1
This update for rubygem-actionpack-5_1 fixes the following issues:
- CVE-2020-8164: Possible Strong Parameters Bypass in ActionPack. There is a strong parameters bypass vector in ActionPack. (bsc#1172177)
This update was imported from the SUSE:SLE-15:Update update project.
Список пакетов
openSUSE Leap 15.1
ruby2.5-rubygem-actionpack-5_1-5.1.4-lp151.4.3.1
ruby2.5-rubygem-actionpack-doc-5_1-5.1.4-lp151.4.3.1
Ссылки
- E-Mail link for openSUSE-SU-2020:1533-1
- SUSE Security Ratings
- SUSE Bug 1172177
- SUSE CVE CVE-2020-8164 page
Описание
A deserialization of untrusted data vulnerability exists in rails < 5.2.4.3, rails < 6.0.3.1 which can allow an attacker to supply information can be inadvertently leaked fromStrong Parameters.
Затронутые продукты
openSUSE Leap 15.1:ruby2.5-rubygem-actionpack-5_1-5.1.4-lp151.4.3.1
openSUSE Leap 15.1:ruby2.5-rubygem-actionpack-doc-5_1-5.1.4-lp151.4.3.1
Ссылки
- CVE-2020-8164
- SUSE Bug 1172177