SUSE-SU-2015:1522-1

Details

rubygem-rack-1_4 was updated to fix one security issue.

This security issue was fixed:

CVE-2015-3225: Crafted requests could have caused a SystemStackError leading to Denial of Service. (bsc#934797)

Affected Packages

rubygem-rack-1_4

SUSE Lifecycle Management Server 1.3SUSE Linux Enterprise Software Development Kit 11 SP3SUSE Linux Enterprise Software Development Kit 11 SP4SUSE Studio Onsite 1.3SUSE WebYast 1.3

Fixed in:

1.4.5-0.7.3

References

REPORT

https://bugzilla.suse.com/934797

WEB

https://www.suse.com/security/cve/CVE-2015-3225

ADVISORY

https://www.suse.com/support/update/announcement/2015/suse-su-20151522-1/