Lucene search
SuseOPENSUSE-SU-2020:0803-1HistoryJun 13, 2020 - 12:00 a.m.
Security update for rubygem-bundler (moderate)
2020-06-1300:00:00
lists.opensuse.org
27
0.001 Low
EPSS
Percentile
27.3%
An update that fixes one vulnerability is now available.
Description:
This update for rubygem-bundler fixes the following issue:
- CVE-2019-3881: Fixed insecure permissions on a directory in /tmp/ that
allowed malicious code execution (bsc#1143436).
This update was imported from the SUSE:SLE-15:Update update project.
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.
Alternatively you can run the command listed for your product:
-
openSUSE Leap 15.1:
zypper in -t patch openSUSE-2020-803=1
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE Leap | 15.1 | x86_64 | < - openSUSE Leap 15.1 (x86_64): | - openSUSE Leap 15.1 (x86_64):.x86_64.rpm |
Related
nessus
nessus
SUSE SLED15 / SLES15 Security Update : rubygem-bundler (SUSE-SU-2020:1582-1)
2020-06-18 00:00:00
SUSE SLED15 / SLES15 Security Update : rubygem-bundler (SUSE-SU-2020:1582-2)
2020-07-16 00:00:00
openSUSE Security Update : rubygem-bundler (openSUSE-2020-803)
2020-07-20 00:00:00
osv
osv
Insecure path handling in Bundler
2021-05-10 14:53:59
CVE-2019-3881
2020-09-04 12:15:10
bundler vulnerability
2021-03-15 22:59:20
cve
cve
CVE-2019-3881
2020-09-04 12:15:10
cvelist
cvelist
CVE-2019-3881
2020-09-04 00:00:00
nvd
nvd
CVE-2019-3881
2020-09-04 12:15:10
suse
suse
Security update for rubygem-bundler (moderate)
2020-06-25 00:00:00
github
github
Insecure path handling in Bundler
2021-05-10 14:53:59
openvas
openvas
openSUSE: Security Advisory for rubygem-bundler (openSUSE-SU-2020:0861-1)
2020-06-25 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:1582-1)
2021-06-09 00:00:00
Ubuntu: Security Advisory (USN-4870-1)
2023-01-27 00:00:00
ubuntucve
ubuntucve
CVE-2019-3881
2020-09-04 00:00:00
redhatcve
redhatcve
CVE-2019-3881
2019-10-30 09:46:40
prion
prion
Code injection
2020-09-04 12:15:00
debiancve
debiancve
CVE-2019-3881
2020-09-04 12:15:10
veracode
veracode
Remote Code Execution (RCE)
2019-07-31 09:46:13
alpinelinux
alpinelinux
CVE-2019-3881
2020-09-04 12:15:00
ubuntu
ubuntu
Bundler vulnerability
2021-03-15 00:00:00
freebsd
freebsd
Gitlab -- multiple vulnerabilities
2021-01-07 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2021-0060
2021-07-13 00:00:00
Critical Photon OS Security Update - PHSA-2021-4.0-0060
2021-07-13 00:00:00
rocky
rocky
ruby:2.6 security, bug fix, and enhancement update
2021-06-29 13:58:40
redhat
redhat
almalinux
almalinux
Moderate: ruby:2.6 security, bug fix, and enhancement update
2021-06-29 13:58:40
oraclelinux
oraclelinux
ruby:2.6 security, bug fix, and enhancement update
2021-07-07 00:00:00
ibm
ibm
rosalinux
rosalinux
Advisory ROSA-SA-2021-1966
2021-07-02 18:06:34