SUSE-SU-2022:3621-1

UNKNOWN

Security update for rubygem-activesupport-5_1

Published Oct 18, 2022

Modified 3 years ago

Fix available

Details

This update for rubygem-activesupport-5_1 fixes the following issues:

CVE-2022-27777: Fixed cross-site scripting vulnerability in Action View tag helper (bsc#1199060).

Affected Packages

ruby2.5-rubygem-activesupport-5_1

SUSE Linux Enterprise High Availability Extension 15SUSE Linux Enterprise High Availability Extension 15 SP1SUSE Linux Enterprise High Availability Extension 15 SP2SUSE Linux Enterprise High Availability Extension 15 SP3SUSE Linux Enterprise High Availability Extension 15 SP4

Fixed in:

5.1.4-150000.3.9.1

rubygem-activesupport-5_1

Fixed in:

5.1.4-150000.3.9.1

ruby2.5-rubygem-activesupport-doc-5_1

openSUSE Leap 15.3openSUSE Leap 15.4

Fixed in:

5.1.4-150000.3.9.1

References

REPORT

https://bugzilla.suse.com/1199060