SUSE-SU-2014:0430-1: Security update for rubygem-activerecord-2_3, rubygem-activesupport-2_3

[sle-security-updates at lists.suse.com]

   SUSE Security Update: Security update for rubygem-activerecord-2_3, rubygem-activesupport-2_3
______________________________________________________________________________

Announcement ID:    SUSE-SU-2014:0430-1
Rating:             low
References:         #864873 
Affected Products:
                    SUSE Cloud 3
______________________________________________________________________________

   An update that contains security fixes can now be installed.

Description:


   Various Ruby gems were released where the unpacked tree was
   patched for the  current security issues, but the included
   gem file (gem archive) was not  adjusted.

   This update rolls the current updates to also include the
   fixes in the .gem  files.


Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Cloud 3:

      zypper in -t patch sleclo30sp3-rails-fixgem-201402-8994

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Cloud 3 (x86_64):

      rubygem-activerecord-2_3-2.3.17-0.13.1
      rubygem-activesupport-2_3-2.3.17-0.13.1


References:

   https://bugzilla.novell.com/864873
   http://download.suse.com/patch/finder/?keywords=ecf51c02031e4d9b4d1d23dff1a4d2bf