Fedora 22 : rubygem-actionpack-4.2.0-4.fc22 / rubygem-actionview-4.2.0-5.fc22 (2016-3954061e32)

Fix rails-html-sanitizer v1.0.3 compatibility. Fix code injection vulnerability CVE-2016-2098. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

[SECURITY] Fedora 22 Update: rubygem-actionview-4.2.0-5.fc22

Simple, battle-tested conventions and helpers for building web pages...

[SECURITY] Fedora 23 Update: rubygem-actionview-4.2.3-5.fc23

Simple, battle-tested conventions and helpers for building web pages...

openSUSE Security Update : rubygem-actionview-4_2 (openSUSE-2016-352)

This update for rubygem-actionview-42 fixes the following issues : - CVE-2016-2098: rubygem-actionpack: Possible remote code execution vulnerability in Action Pack boo968849 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

openSUSE: Security Advisory for rubygem-actionview-4_2 (openSUSE-SU-2016:0790-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for rubygem-actionview-4_2 (important)

This update for rubygem-actionview-42 fixes the following issues: - CVE-2016-2098: rubygem-actionpack: Possible remote code execution vulnerability in Action Pack boo968849...

Debian: Security Advisory (DSA-3509-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 23 : rubygem-actionview-4.2.3-3.fc23 (2016-97002ad37b)

Security fix for CVE-2016-0752 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 22 : rubygem-actionview-4.2.0-3.fc22 (2016-fa0dec2360)

Security fix for CVE-2016-0752 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora Update for rubygem-actionview FEDORA-2016-97002

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 23 Update: rubygem-actionview-4.2.3-3.fc23

Simple, battle-tested conventions and helpers for building web pages...

SUSE-SU-2016:0599-1 Security update for rubygem-actionview-4_1

This update for rubygem-actionview-41 fixes the following issues: - CVE-2016-0752: directory traversal and information leak in Action View bsc963332...

SUSE-SU-2016:0456-1 Security update for rubygem-actionview-4_2

This update for rubygem-actionview-42 fixes the following issues: - CVE-2016-0752: directory traversal and information leak in Action View bsc963332...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in actionview/lib/actionview/helpers/numberhelper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject arbitrary web script or HTML via the 1 format, 2 negativeformat, or 3 units...

CVE-2014-0081: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in actionview/lib/actionview/helpers/numberhelper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject arbitrary web script or HTML via the 1 format, 2 negativeformat, or 3 units...

[SECURITY] Fedora 20 Update: rubygem-will_paginate-3.0.4-5.fc20

The willpaginate library provides a simple, yet powerful and extensible API for ActiveRecord pagination and rendering of pagination links in ActionView templates...

[SECURITY] Fedora 19 Update: rubygem-will_paginate-3.0.4-5.fc19

The willpaginate library provides a simple, yet powerful and extensible API for ActiveRecord pagination and rendering of pagination links in ActionView templates...

CVE-2012-3465: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in actionpack/lib/actionview/helpers/sanitizehelper.rb in the striptags helper in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via malformed HTML markup...