Lucene search
SuseSUSE-SU-2015:2337-1HistoryDec 21, 2015 - 11:10 p.m.
Security update for rubygem-passenger (important)
2015-12-2123:10:29
lists.opensuse.org
11
0.007 Low
EPSS
Percentile
80.8%
This update for rubygem-passenger fixes the following issues:
- CVE-2015-7519: rubygem-passenger was not filtering the environment like
apache is doing, allowing injection
of environment variables (bsc#956281)
References
Related
nvd
nvd
CVE-2015-7519
2016-01-08 19:59:05
osv
osv
Phusion Passenger allows remote attackers to spoof headers
2018-10-10 17:29:13
ruby-passenger - security update
2018-06-27 00:00:00
cvelist
cvelist
CVE-2015-7519
2016-01-08 19:00:00
github
github
Phusion Passenger allows remote attackers to spoof headers
2018-10-10 17:29:13
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2015:2337-1)
2021-06-09 00:00:00
Debian: Security Advisory (DLA-394-1)
2023-03-08 00:00:00
Debian: Security Advisory (DLA-1399-1)
2018-07-09 00:00:00
debiancve
debiancve
CVE-2015-7519
2016-01-08 19:59:05
cve
cve
CVE-2015-7519
2016-01-08 19:59:05
freebsd
freebsd
passenger -- client controlled header overwriting
2015-12-07 00:00:00
nessus
nessus
Debian DLA-394-1 : passenger security update
2016-01-19 00:00:00
FreeBSD : passenger -- client controlled header overwriting (84fdd1bb-9d37-11e5-8f5c-002590263bf5)
2015-12-08 00:00:00
Debian DLA-1399-1 : ruby-passenger security update
2018-06-28 00:00:00
ubuntucve
ubuntucve
CVE-2015-7519
2016-01-08 00:00:00
prion
prion
Design/Logic Flaw
2016-01-08 19:59:00
debian
debian
[SECURITY] [DLA 394-1] passenger security update
2016-01-18 18:56:58
[SECURITY] [DLA 1399-1] ruby-passenger security update
2018-06-27 19:39:46