Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2020:1677-1

Опубликовано: 16 окт. 2020
Источник: suse-cvrf

Описание

Security update for rubygem-activesupport-5_1

This update for rubygem-activesupport-5_1 fixes the following issues:

  • CVE-2020-8165: Fixed deserialization of untrusted data in MemCacheStore potentially resulting in remote code execution (bsc#1172186)

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.1
ruby2.5-rubygem-activesupport-5_1-5.1.4-lp151.3.3.1
ruby2.5-rubygem-activesupport-doc-5_1-5.1.4-lp151.3.3.1

Ссылки

Описание

A deserialization of untrusted data vulnernerability exists in rails < 5.2.4.3, rails < 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in MemCacheStore and RedisCacheStore potentially resulting in an RCE.

Затронутые продукты
openSUSE Leap 15.1:ruby2.5-rubygem-activesupport-5_1-5.1.4-lp151.3.3.1
openSUSE Leap 15.1:ruby2.5-rubygem-activesupport-doc-5_1-5.1.4-lp151.3.3.1
Ссылки
Уязвимость openSUSE-SU-2020:1677-1