Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Производитель ПО
Наименование ПО
rubygem-activesupport-3_2
(any)
rubygem-rack-1_4
(any)
Описание
Уведомление безопасности об уязвимостях WebYaST 1.3, SUSE Linux Enterprise Software Development Kit 11 SP2, SUSE Studio Onsite 1.3, SUSE Lifecycle Management Server 1.3
Как исправить
Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
WebYaST 1.3:
i586, ia64, ppc64, s390x, x86_64:
rubygem-actionpack-3_2 - 3.2.12-0.7.1
rubygem-rails-3_2 - 3.2.12-0.5.10
rubygem-railties-3_2 - 3.2.12-0.7.9
rubygem-activeresource-3_2 - 3.2.12-0.5.8
rubygem-activesupport-3_2 - 3.2.12-0.5.8
rubygem-actionmailer-3_2 - 3.2.12-0.5.9
rubygem-activerecord-3_2 - 3.2.12-0.7.1
rubygem-activemodel-3_2 - 3.2.12-0.5.8
rubygem-rack-1_4 - 1.4.5-0.5.8
SUSE Linux Enterprise Software Development Kit 11 SP2:
i586, ia64, ppc64, s390x, x86_64:
rubygem-activesupport-3_2 - 3.2.12-0.5.8
rubygem-rack-1_4 - 1.4.5-0.5.8
SUSE Studio Onsite 1.3:
x86_64:
rubygem-actionpack-3_2 - 3.2.12-0.7.1
rubygem-rails-3_2 - 3.2.12-0.5.10
rubygem-railties-3_2 - 3.2.12-0.7.9
rubygem-activeresource-3_2 - 3.2.12-0.5.8
rubygem-activesupport-3_2 - 3.2.12-0.5.8
rubygem-actionmailer-3_2 - 3.2.12-0.5.9
rubygem-activerecord-3_2 - 3.2.12-0.7.1
rubygem-activemodel-3_2 - 3.2.12-0.5.8
rubygem-rack-1_4 - 1.4.5-0.5.8
SUSE Lifecycle Management Server 1.3:
x86_64:
rubygem-actionpack-3_2 - 3.2.12-0.7.1
rubygem-rails-3_2 - 3.2.12-0.5.10
rubygem-railties-3_2 - 3.2.12-0.7.9
rubygem-activeresource-3_2 - 3.2.12-0.5.8
rubygem-activesupport-3_2 - 3.2.12-0.5.8
rubygem-actionmailer-3_2 - 3.2.12-0.5.9
rubygem-activerecord-3_2 - 3.2.12-0.7.1
rubygem-activemodel-3_2 - 3.2.12-0.5.8
rubygem-rack-1_4 - 1.4.5-0.5.8
WebYaST 1.3:
i586, ia64, ppc64, s390x, x86_64:
rubygem-actionpack-3_2 - 3.2.12-0.7.1
rubygem-rails-3_2 - 3.2.12-0.5.10
rubygem-railties-3_2 - 3.2.12-0.7.9
rubygem-activeresource-3_2 - 3.2.12-0.5.8
rubygem-activesupport-3_2 - 3.2.12-0.5.8
rubygem-actionmailer-3_2 - 3.2.12-0.5.9
rubygem-activerecord-3_2 - 3.2.12-0.7.1
rubygem-activemodel-3_2 - 3.2.12-0.5.8
rubygem-rack-1_4 - 1.4.5-0.5.8
SUSE Linux Enterprise Software Development Kit 11 SP2:
i586, ia64, ppc64, s390x, x86_64:
rubygem-activesupport-3_2 - 3.2.12-0.5.8
rubygem-rack-1_4 - 1.4.5-0.5.8
SUSE Studio Onsite 1.3:
x86_64:
rubygem-actionpack-3_2 - 3.2.12-0.7.1
rubygem-rails-3_2 - 3.2.12-0.5.10
rubygem-railties-3_2 - 3.2.12-0.7.9
rubygem-activeresource-3_2 - 3.2.12-0.5.8
rubygem-activesupport-3_2 - 3.2.12-0.5.8
rubygem-actionmailer-3_2 - 3.2.12-0.5.9
rubygem-activerecord-3_2 - 3.2.12-0.7.1
rubygem-activemodel-3_2 - 3.2.12-0.5.8
rubygem-rack-1_4 - 1.4.5-0.5.8
SUSE Lifecycle Management Server 1.3:
x86_64:
rubygem-actionpack-3_2 - 3.2.12-0.7.1
rubygem-rails-3_2 - 3.2.12-0.5.10
rubygem-railties-3_2 - 3.2.12-0.7.9
rubygem-activeresource-3_2 - 3.2.12-0.5.8
rubygem-activesupport-3_2 - 3.2.12-0.5.8
rubygem-actionmailer-3_2 - 3.2.12-0.5.9
rubygem-activerecord-3_2 - 3.2.12-0.7.1
rubygem-activemodel-3_2 - 3.2.12-0.5.8
rubygem-rack-1_4 - 1.4.5-0.5.8
Ссылки
http://lists.suse.com/pipermail/sle-security-updates/2013-May/000447.html
https://bugzilla.novell.com/809932
https://bugzilla.novell.com/809935
https://bugzilla.novell.com/809940
http://download.novell.com/patch/finder/?keywords=fbe3a3e7096c7d4e58117c534e78345a
Источник: CVE
Наименование: CVE-2013-1854
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1854
https://bugzilla.novell.com/809932
https://bugzilla.novell.com/809935
https://bugzilla.novell.com/809940
http://download.novell.com/patch/finder/?keywords=fbe3a3e7096c7d4e58117c534e78345a
Источник: CVE
Наименование: CVE-2013-1854
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1854
