SUSE-SU-2015:1888-1

Source
https://www.suse.com/support/update/announcement/2015/suse-su-20151888-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1888-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2015:1888-1
Related
Published
2015-09-01T14:35:10Z
Modified
2015-09-01T14:35:10Z
Summary
Security update for rubygem-rack
Details

rubygem-rack was updated to fix one security issue.

This security issue was fixed: - CVE-2015-3225: Crafted requests could have caused a SystemStackError leading to Denial of Service (bsc#934797).

References

Affected packages

SUSE:Linux Enterprise Software Development Kit 11 SP3 / rubygem-rack

Package

Name
rubygem-rack
Purl
pkg:rpm/suse/rubygem-rack&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.6-0.11.2

Ecosystem specific

{
    "binaries": [
        {
            "rubygem-rack": "1.1.6-0.11.2"
        }
    ]
}

SUSE:Lifecycle Management Server 1.3 / rubygem-rack

Package

Name
rubygem-rack
Purl
pkg:rpm/suse/rubygem-rack&distro=SUSE%20Lifecycle%20Management%20Server%201.3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.6-0.11.2

Ecosystem specific

{
    "binaries": [
        {
            "rubygem-rack": "1.1.6-0.11.2"
        }
    ]
}