Skip to content
OpenAdvisories
Medium DSA-4415-1 1 CVE

passenger - security update

Published Mar 24, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 passenger 5.0.30-1+deb9u1

Vulnerabilities 1

  • Medium 4.7
    CVE-2017-16355

    Phusion Passenger information disclosure

    In agent/Core/SpawningKit/Spawner.h in Phusion Passenger 5.1.10 (fixed in Passenger Open Source 5.1.11 and Passenger Enterprise 5.1.10), if Passenger is running as root, it is possible to list the contents of arbitrary files on a system by symlinking a file n…

    passenger passenger passenger Debian Ubuntu RubyGems