TI-2018-02756 CVE-2018-3760 · GHSA-pr3h-jjhj-573x
Path traversal in HackerOne Sprockets
Priority MEDIUM 55
There is an information leak vulnerability in Sprockets.
RHSA-2018:2245
rh-ror50-rubygem-sprockets security update
Released 2018-07-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-ror50-rubygem-sprockets-3.7.1-2.el6, rh-ror50-rubygem-sprockets-doc-3.7.1-2.el6
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-ror50-rubygem-sprockets-3.7.1-2.el7, rh-ror50-rubygem-sprockets-doc-3.7.1-2.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) rh-ror50-rubygem-sprockets-3.7.1-2.el6, rh-ror50-rubygem-sprockets-doc-3.7.1-2.el6
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) rh-ror50-rubygem-sprockets-3.7.1-2.el7, rh-ror50-rubygem-sprockets-doc-3.7.1-2.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-ror50-rubygem-sprockets-3.7.1-2.el7, rh-ror50-rubygem-sprockets-doc-3.7.1-2.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-ror50-rubygem-sprockets-3.7.1-2.el7, rh-ror50-rubygem-sprockets-doc-3.7.1-2.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-ror50-rubygem-sprockets-3.7.1-2.el6, rh-ror50-rubygem-sprockets-doc-3.7.1-2.el6
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-ror50-rubygem-sprockets-3.7.1-2.el7, rh-ror50-rubygem-sprockets-doc-3.7.1-2.el7