SUSE-SU-2016:0623-1

Details

This update for rubygem-activesupport-3_2 fixes the following issues:

CVE-2015-7576: Timing attack vulnerability in basic authentication in Action Controller (bsc#963329)

Affected Packages

rubygem-activesupport-3_2

SUSE Lifecycle Management Server 1.3SUSE Linux Enterprise Software Development Kit 11 SP3SUSE Linux Enterprise Software Development Kit 11 SP4SUSE Studio Onsite 1.3SUSE WebYast 1.3

Fixed in:

3.2.12-0.18.1

References

REPORT

https://bugzilla.suse.com/963329

WEB

https://www.suse.com/security/cve/CVE-2015-7576

ADVISORY

https://www.suse.com/support/update/announcement/2016/suse-su-20160623-1/