< back to search

gpp_maybe Security update for rubygem-yard
SUSE-SLE-SDK-12-SP3-2018-1286

This update for rubygem-yard fixes the following issues: - CVE-2017-17042: The server in YARD did not block relative paths with an initial ../ sequence, which allowed attackers to conduct directory traversal attacks and read arbitrary files (bsc#1070263).

  • Release Date
    Jul 5 2018
  • References
    Bugzilla: 1070263
    CVEs: CVE-2017-17042
  • Type
    security
  • Severity
    important

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.3 ppc64le
  • Packages
    ruby2.1-rubygem-yard
    Documentation tool for consistent and usable documentation in Ruby
    0.8.7.3-7.3.1
    lock rpm
    rubygem-yard
    Documentation tool for consistent and usable documentation in Ruby
    0.8.7.3-7.3.1
    lock src
SUSE Linux Enterprise Software Development Kit 12.3 aarch64
  • Packages
    ruby2.1-rubygem-yard
    Documentation tool for consistent and usable documentation in Ruby
    0.8.7.3-7.3.1
    lock rpm
    rubygem-yard
    Documentation tool for consistent and usable documentation in Ruby
    0.8.7.3-7.3.1
    lock src
SUSE Linux Enterprise Software Development Kit 12.3 x86_64
  • Packages
    ruby2.1-rubygem-yard
    Documentation tool for consistent and usable documentation in Ruby
    0.8.7.3-7.3.1
    lock rpm
    rubygem-yard
    Documentation tool for consistent and usable documentation in Ruby
    0.8.7.3-7.3.1
    lock src
SUSE Linux Enterprise Software Development Kit 12.3 s390x
  • Packages
    ruby2.1-rubygem-yard
    Documentation tool for consistent and usable documentation in Ruby
    0.8.7.3-7.3.1
    lock rpm
    rubygem-yard
    Documentation tool for consistent and usable documentation in Ruby
    0.8.7.3-7.3.1
    lock src