Security update for rubygem-activerecord-2_3, rubygem-activesupport-2_3

SUSE Security Update: Security update for rubygem-activerecord-2_3, rubygem-activesupport-2_3
Announcement ID: SUSE-SU-2014:0430-1
Rating: low
References: #864873
Affected Products:
  • SUSE Cloud 3

  • An update that contains security fixes can now be installed.

    Description:


    Various Ruby gems were released where the unpacked tree was
    patched for the current security issues, but the included
    gem file (gem archive) was not adjusted.

    This update rolls the current updates to also include the
    fixes in the .gem files.

    Patch Instructions:

    To install this SUSE Security Update use YaST online_update.
    Alternatively you can run the command listed for your product:

    • SUSE Cloud 3:
      zypper in -t patch sleclo30sp3-rails-fixgem-201402-8994

    To bring your system up-to-date, use "zypper patch".

    Package List:

    • SUSE Cloud 3 (x86_64):
    • rubygem-activerecord-2_3-2.3.17-0.13.1
    • rubygem-activesupport-2_3-2.3.17-0.13.1

    References:

    • https://bugzilla.novell.com/864873
    • http://download.suse.com/patch/finder/?keywords=ecf51c02031e4d9b4d1d23dff1a4d2bf