34 matches found
[SECURITY] Fedora 27 Update: rubygem-sprockets-3.7.2-1.fc27
Sprockets is a Rack-based asset packaging system that concatenates and serv es JavaScript, CoffeeScript, CSS, LESS, Sass, and SCSS...
openSUSE Security Update : rubygem-sprockets (openSUSE-2018-686)
This update for rubygem-sprockets fixes the following issues : The following security vulnerability was addressed : - CVE-2018-3760: Fixed a directory traversal issue in sprockets/server.rb:forbiddenrequest?, which allowed remote attackers to read arbitrary files via specially crafted requests...
openSUSE: Security Advisory for rubygem-sprockets (openSUSE-SU-2018:1854-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security update for rubygem-sprockets (important)
This update for rubygem-sprockets fixes the following issues: The following security vulnerability was addressed: - CVE-2018-3760: Fixed a directory traversal issue in sprockets/server.rb:forbiddenrequest?, which allowed remote attackers to read arbitrary files via specially crafted requests...
SUSE-SU-2015:0787-1 Security update for rubygem-sprockets-2_11
This update for rubygem-sprockets-211 provides the following security fix: Arbitrary file existence disclosure bnc903658, CVE-2014-7819 Security Issues: CVE-2014-7819...
Fedora Update for rubygem-sprockets FEDORA-2014-15489
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for rubygem-sprockets FEDORA-2014-15413
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 21 : rubygem-sprockets-2.12.1-3.fc21 (2014-15413)
Contains fix for CVE-2014-7819 rubygem-sprockets: arbitrary file existence disclosure Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
Fedora 20 : rubygem-sprockets-2.8.2-5.fc20 (2014-15489)
Contains fix for CVE-2014-7819 rubygem-sprockets: arbitrary file existence disclosure Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
openSUSE Security Update : rubygem-sprockets (openSUSE-SU-2014:1514-1)
rubygem-sprockets was updated to fix one security issue. This security issue was fixed : - Arbitrary file existence disclosure CVE-2014-7819. To enable this update rubygem-tilt-14 was added to openSUSE and installed with the update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
openSUSE Security Update : rubygem-sprockets (openSUSE-SU-2014:1513-1)
rubygem-sprockets was updated to fix one security issue. This security issue was fixed : - Arbitrary file existence disclosure CVE-2014-7819. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
openSUSE Security Update : rubygem-sprockets-2_1 (openSUSE-SU-2014:1502-1)
rubygem-sprockets-21 was updated to fix one security issue. This security issue was fixed : - Arbitrary file existence disclosure CVE-2014-7819. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
openSUSE Security Update : rubygem-sprockets-2_2 (openSUSE-SU-2014:1504-1)
rubygem-sprockets-22 was updated to fix one security issue. This security issue was fixed : - Arbitrary file existence disclosure CVE-2014-7819. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
CVE-2014-7819 rubygem-sprockets: arbitrary file existence disclosure
Multiple directory traversal vulnerabilities in server.rb in Sprockets before 2.0.5, 2.1.x before 2.1.4, 2.2.x before 2.2.3, 2.3.x before 2.3.3, 2.4.x before 2.4.6, 2.5.x before 2.5.1, 2.6.x and 2.7.x before 2.7.1, 2.8.x before 2.8.3, 2.9.x before 2.9.4, 2.10.x before 2.10.2, 2.11.x before 2.11.3...