SUSE-SU-2015:1888-1

Details

Description of the patch:

rubygem-rack was updated to fix one security issue.

This security issue was fixed:

CVE-2015-3225: Crafted requests could have caused a SystemStackError leading to Denial of Service (bsc#934797).

Affected Packages

rubygem-rack

SUSE Lifecycle Management Server 1.3SUSE Linux Enterprise Desktop 11 SP3SUSE Linux Enterprise Server 11 SP3SUSE Linux Enterprise Server for SAP Applications 11 SP3SUSE Linux Enterprise Software Development Kit 11 SP3

Fixed in:

1.1.6-0.11.2

References

ADVISORY

https://bugzilla.suse.com/934797

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2015-November/001658.html

ADVISORY

https://www.suse.com/security/cve/CVE-2015-3225/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2015/suse-su-20151888-1/