This update for rubygem-passenger fixes this security issue:
- CVE-2016-10345: A known /tmp filename was used during passenger-install-nginx-module execution, which could have allowed local attackers to gain the privileges of the passenger user (bsc#1034594).