Security update for rubygem-sprockets (important)

2018-06-2921:15:11

lists.opensuse.org

0.023 Low

EPSS

Percentile

89.7%

JSON

This update for rubygem-sprockets fixes the following issues:

The following security vulnerability was addressed:

CVE-2018-3760: Fixed a directory traversal issue in
sprockets/server.rb:forbidden_request?(), which allowed remote attackers
to read arbitrary files via specially crafted requests. (boo#1098369)

OSVersionArchitecturePackageVersionFilename
openSUSE Leap42.3x86_64ruby2.3-rubygem-sprockets-doc< 3.3.5-5.3.1ruby2.3-rubygem-sprockets-doc-3.3.5-5.3.1.x86_64.rpm
openSUSE Leap42.3x86_64ruby2.1-rubygem-sprockets-doc< 3.3.5-5.3.1ruby2.1-rubygem-sprockets-doc-3.3.5-5.3.1.x86_64.rpm
openSUSE Leap42.3i586ruby2.1-rubygem-sprockets-doc< 3.3.5-5.3.1ruby2.1-rubygem-sprockets-doc-3.3.5-5.3.1.i586.rpm
openSUSE Leap42.3x86_64ruby2.2-rubygem-sprockets< 3.3.5-5.3.1ruby2.2-rubygem-sprockets-3.3.5-5.3.1.x86_64.rpm
openSUSE Leap42.3i586ruby2.3-rubygem-sprockets-doc< 3.3.5-5.3.1ruby2.3-rubygem-sprockets-doc-3.3.5-5.3.1.i586.rpm
openSUSE Leap42.3x86_64ruby2.3-rubygem-sprockets< 3.3.5-5.3.1ruby2.3-rubygem-sprockets-3.3.5-5.3.1.x86_64.rpm
openSUSE Leap42.3i586ruby2.3-rubygem-sprockets< 3.3.5-5.3.1ruby2.3-rubygem-sprockets-3.3.5-5.3.1.i586.rpm
openSUSE Leap42.3i586ruby2.2-rubygem-sprockets< 3.3.5-5.3.1ruby2.2-rubygem-sprockets-3.3.5-5.3.1.i586.rpm
openSUSE Leap42.3i586ruby2.1-rubygem-sprockets< 3.3.5-5.3.1ruby2.1-rubygem-sprockets-3.3.5-5.3.1.i586.rpm
openSUSE Leap42.3i586ruby2.4-rubygem-sprockets-doc< 3.3.5-5.3.1ruby2.4-rubygem-sprockets-doc-3.3.5-5.3.1.i586.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE Leap	42.3	x86_64	ruby2.3-rubygem-sprockets-doc	< 3.3.5-5.3.1	ruby2.3-rubygem-sprockets-doc-3.3.5-5.3.1.x86_64.rpm
openSUSE Leap	42.3	x86_64	ruby2.1-rubygem-sprockets-doc	< 3.3.5-5.3.1	ruby2.1-rubygem-sprockets-doc-3.3.5-5.3.1.x86_64.rpm
openSUSE Leap	42.3	i586	ruby2.1-rubygem-sprockets-doc	< 3.3.5-5.3.1	ruby2.1-rubygem-sprockets-doc-3.3.5-5.3.1.i586.rpm
openSUSE Leap	42.3	x86_64	ruby2.2-rubygem-sprockets	< 3.3.5-5.3.1	ruby2.2-rubygem-sprockets-3.3.5-5.3.1.x86_64.rpm
openSUSE Leap	42.3	i586	ruby2.3-rubygem-sprockets-doc	< 3.3.5-5.3.1	ruby2.3-rubygem-sprockets-doc-3.3.5-5.3.1.i586.rpm
openSUSE Leap	42.3	x86_64	ruby2.3-rubygem-sprockets	< 3.3.5-5.3.1	ruby2.3-rubygem-sprockets-3.3.5-5.3.1.x86_64.rpm
openSUSE Leap	42.3	i586	ruby2.3-rubygem-sprockets	< 3.3.5-5.3.1	ruby2.3-rubygem-sprockets-3.3.5-5.3.1.i586.rpm
openSUSE Leap	42.3	i586	ruby2.2-rubygem-sprockets	< 3.3.5-5.3.1	ruby2.2-rubygem-sprockets-3.3.5-5.3.1.i586.rpm
openSUSE Leap	42.3	i586	ruby2.1-rubygem-sprockets	< 3.3.5-5.3.1	ruby2.1-rubygem-sprockets-3.3.5-5.3.1.i586.rpm
openSUSE Leap	42.3	i586	ruby2.4-rubygem-sprockets-doc	< 3.3.5-5.3.1	ruby2.4-rubygem-sprockets-doc-3.3.5-5.3.1.i586.rpm