SUSE-SU-2015:1522-1

Details

Description of the patch:

rubygem-rack-1_4 was updated to fix one security issue.

This security issue was fixed:

CVE-2015-3225: Crafted requests could have caused a SystemStackError leading to Denial of Service. (bsc#934797)

Affected Packages

rubygem-rack-1_4

SUSE Lifecycle Management Server 1.3SUSE Linux Enterprise Desktop 11 SP3SUSE Linux Enterprise Desktop 11 SP4SUSE Linux Enterprise Server 11 SP3SUSE Linux Enterprise Server 11 SP4

Fixed in:

1.4.5-0.7.3

References

ADVISORY

https://bugzilla.suse.com/934797

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2015-September/001584.html

ADVISORY

https://www.suse.com/security/cve/CVE-2015-3225/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2015/suse-su-20151522-1/