Security update for rubygem-yard (important)

2018-07-0700:11:14

lists.opensuse.org

0.002 Low

EPSS

Percentile

51.8%

JSON

This update for rubygem-yard fixes the following issues:

CVE-2017-17042: The server in YARD did not block relative paths with an
initial …/ sequence, which allowed attackers to conduct directory
traversal attacks and read arbitrary files (bsc#1070263).

This update was imported from the SUSE:SLE-12-SP1:Update update project.

OSVersionArchitecturePackageVersionFilename
openSUSE Leap42.3x86_64ruby2.2-rubygem-yard-testsuite< 0.8.7.3-8.3.1ruby2.2-rubygem-yard-testsuite-0.8.7.3-8.3.1.x86_64.rpm
openSUSE Leap42.3i586ruby2.3-rubygem-yard-testsuite< 0.8.7.3-8.3.1ruby2.3-rubygem-yard-testsuite-0.8.7.3-8.3.1.i586.rpm
openSUSE Leap42.3x86_64ruby2.4-rubygem-yard-doc< 0.8.7.3-8.3.1ruby2.4-rubygem-yard-doc-0.8.7.3-8.3.1.x86_64.rpm
openSUSE Leap42.3i586ruby2.2-rubygem-yard< 0.8.7.3-8.3.1ruby2.2-rubygem-yard-0.8.7.3-8.3.1.i586.rpm
openSUSE Leap42.3i586ruby2.3-rubygem-yard< 0.8.7.3-8.3.1ruby2.3-rubygem-yard-0.8.7.3-8.3.1.i586.rpm
openSUSE Leap42.3x86_64ruby2.2-rubygem-yard-doc< 0.8.7.3-8.3.1ruby2.2-rubygem-yard-doc-0.8.7.3-8.3.1.x86_64.rpm
openSUSE Leap42.3x86_64ruby2.2-rubygem-yard< 0.8.7.3-8.3.1ruby2.2-rubygem-yard-0.8.7.3-8.3.1.x86_64.rpm
openSUSE Leap42.3x86_64ruby2.1-rubygem-yard-testsuite< 0.8.7.3-8.3.1ruby2.1-rubygem-yard-testsuite-0.8.7.3-8.3.1.x86_64.rpm
openSUSE Leap42.3x86_64ruby2.3-rubygem-yard-doc< 0.8.7.3-8.3.1ruby2.3-rubygem-yard-doc-0.8.7.3-8.3.1.x86_64.rpm
openSUSE Leap42.3i586ruby2.1-rubygem-yard-doc< 0.8.7.3-8.3.1ruby2.1-rubygem-yard-doc-0.8.7.3-8.3.1.i586.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE Leap	42.3	x86_64	ruby2.2-rubygem-yard-testsuite	< 0.8.7.3-8.3.1	ruby2.2-rubygem-yard-testsuite-0.8.7.3-8.3.1.x86_64.rpm
openSUSE Leap	42.3	i586	ruby2.3-rubygem-yard-testsuite	< 0.8.7.3-8.3.1	ruby2.3-rubygem-yard-testsuite-0.8.7.3-8.3.1.i586.rpm
openSUSE Leap	42.3	x86_64	ruby2.4-rubygem-yard-doc	< 0.8.7.3-8.3.1	ruby2.4-rubygem-yard-doc-0.8.7.3-8.3.1.x86_64.rpm
openSUSE Leap	42.3	i586	ruby2.2-rubygem-yard	< 0.8.7.3-8.3.1	ruby2.2-rubygem-yard-0.8.7.3-8.3.1.i586.rpm
openSUSE Leap	42.3	i586	ruby2.3-rubygem-yard	< 0.8.7.3-8.3.1	ruby2.3-rubygem-yard-0.8.7.3-8.3.1.i586.rpm
openSUSE Leap	42.3	x86_64	ruby2.2-rubygem-yard-doc	< 0.8.7.3-8.3.1	ruby2.2-rubygem-yard-doc-0.8.7.3-8.3.1.x86_64.rpm
openSUSE Leap	42.3	x86_64	ruby2.2-rubygem-yard	< 0.8.7.3-8.3.1	ruby2.2-rubygem-yard-0.8.7.3-8.3.1.x86_64.rpm
openSUSE Leap	42.3	x86_64	ruby2.1-rubygem-yard-testsuite	< 0.8.7.3-8.3.1	ruby2.1-rubygem-yard-testsuite-0.8.7.3-8.3.1.x86_64.rpm
openSUSE Leap	42.3	x86_64	ruby2.3-rubygem-yard-doc	< 0.8.7.3-8.3.1	ruby2.3-rubygem-yard-doc-0.8.7.3-8.3.1.x86_64.rpm
openSUSE Leap	42.3	i586	ruby2.1-rubygem-yard-doc	< 0.8.7.3-8.3.1	ruby2.1-rubygem-yard-doc-0.8.7.3-8.3.1.i586.rpm