MGASA-2013-0253

Source
https://advisories.mageia.org/MGASA-2013-0253.html
Import Source
https://advisories.mageia.org/MGASA-2013-0253.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2013-0253
Upstream
Published
2013-08-22T18:01:03Z
Modified
2026-04-16T01:47:10.113062246Z
Summary
Updated rubygem-passenger package fixes CVE-2013-4136 & apache module
Details

Updated rubygem-passenger package fixes security vulnerability:

It was reported that Phusion Passenger would reuse existing server instance directories (temporary directories) which could cause Passenger to remove or overwrite files belonging to other instances (CVE-2013-4136).

Additionally, the package has been fixed so that the Apache module should load.

References
Credits

Affected packages

Mageia:3 / rubygem-passenger

Package

Name
rubygem-passenger
Purl
pkg:rpm/mageia/rubygem-passenger?arch=source&distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.0.21-2.2.mga3

Ecosystem specific

{
    "section": "core"
}

Database specific

source
"https://advisories.mageia.org/MGASA-2013-0253.json"