drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Mehrere Probleme in Passenger
Name: |
Mehrere Probleme in Passenger |
|
ID: |
201807-02 |
|
Distribution: |
Gentoo |
|
Plattformen: |
Keine Angabe |
|
Datum: |
Mo, 23. Juli 2018, 00:04 |
|
Referenzen: |
https://nvd.nist.gov/vuln/detail/CVE-2018-12026
https://nvd.nist.gov/vuln/detail/CVE-2018-12029
https://nvd.nist.gov/vuln/detail/CVE-2018-12028
https://nvd.nist.gov/vuln/detail/CVE-2018-12027 |
|
Applikationen: |
Passenger |
|
Originalnachricht |
--LpQ9ahxlCli8rRTG Content-Type: text/plain; charset=utf-8 Content-Disposition: inlin Content-Transfer-Encoding: quoted-printable
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201807-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Severity: Normal Title: Passenger: Multiple Vulnerabilities Date: July 22, 2018 Bugs: #658346 ID: 201807-02
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Synopsis ========
Multiple vulnerabilities have been found in Passenger, the worst of which could result in the execution of arbitrary code.
Background ==========
Passenger runs and manages your Ruby, Node.js, and Python apps.
Affected packages =================
------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-apache/passenger < 5.3.2 >= 5.3.2
Description ===========
Multiple vulnerabilities have been discovered in Passenger. Please review the CVE identifiers referenced below for details.
Impact ======
A remote attacker could escalate privileges, execute arbitrary code, cause a Denial of Service condition, or obtain sensitive information.
Workaround ==========
There is no known workaround at this time.
Resolution ==========
All Passenger users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-apache/passenger-5.3.2"
References ==========
[ 1 ] CVE-2018-12026 https://nvd.nist.gov/vuln/detail/CVE-2018-12026 [ 2 ] CVE-2018-12027 https://nvd.nist.gov/vuln/detail/CVE-2018-12027 [ 3 ] CVE-2018-12028 https://nvd.nist.gov/vuln/detail/CVE-2018-12028 [ 4 ] CVE-2018-12029 https://nvd.nist.gov/vuln/detail/CVE-2018-12029
Availability ============
This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
https://security.gentoo.org/glsa/201807-02
Concerns? =========
Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.
License =======
Copyright 2018 Gentoo Foundation, Inc; referenced text belongs to its owner(s).
The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.
https://creativecommons.org/licenses/by-sa/2.5
--LpQ9ahxlCli8rRTG Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE-----
iQEzBAABCAAdFiEEiDRK3jyVBE/RkymqpRQw84X1dt0FAltU7l8ACgkQpRQw84X1 dt0hRgf6A1OPXED0Pb8PUsU0rqoE2arGVq0d+ZDmaaLDsZwjzph1NAt9v2KlRiWE ED3gWHxfdpQqkfVd8lDSFHQUxcf7+xljrts3JiCqar+4IfFsYjQLNrdXPGliOkJU LP6ZhTcvHgITmvEEuiunoa2pWWIXA7Iz4Rb1baTayJ0wFN0Djx4RFoDAIwtGUxyG DrQ5p+hmRGbcJIX+AlSpmwlRGWz+hvzhDl8PJ+x155y+WfVLermBWGuPNrUnHyjX KsTTyGRyBHXj7kMlna62qhmPzfvTsSWnY7aZqR7Q3g9mIxyI7Ox7HLPx6HhrI8VG 8Fwj8EC+AptvGl1KcjjLkmrIEiumzw== =SmC3 -----END PGP SIGNATURE-----
--LpQ9ahxlCli8rRTG--
|
|
|
|