rubygem-passenger: environment variable injection
| Package(s): | rubygem-passenger | CVE #(s): | CVE-2015-7519 | ||||||||
| Created: | December 22, 2015 | Updated: | January 19, 2016 | ||||||||
| Description: | From the SUSE advisory:
rubygem-passenger was not filtering the environment like apache is doing, allowing injection of environment variables. | ||||||||||
| Alerts: |
| ||||||||||