openSUSE Security Update : rubygem-actionpack-3_2 (openSUSE-SU-2014:0009-1)

This update fixes the following security issues with rubygem-actionpack-32 : - fix CVE-2013-4389: rubygem-actionmailer-31: possible DoS vulnerability in the log subscriber component bnc846239 File CVE-2013-4389.patch contains the fix. - fix CVE-2013-4491: rubygem-actionpack: i18n missing...

openSUSE Security Update : rubygem-i18n / rubygem-i18n-0_6 (openSUSE-SU-2013:1930-1)

This update fixes the following security issue with rubygem-i18n : - fix bnc854166: CVE-2013-4492: rubygem-i18n: missing translation XSS. File CVE-2013-4492.patch.i18n.0.6.x contains the fix. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

openSUSE Security Update : rubygem-rack-ssl (openSUSE-SU-2014:0515-1)

This rubygem-rack-ssl updated fixes the following security issue : - bnc869162: Fixed XSS in error page CVE-2014-2538. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-293. The te...

openSUSE Security Update : rubygem-activesupport-3_2 (openSUSE-SU-2013:1931-1)

This update fixes the following security issues with rubygem-activesupport-32 : - fix CVE-2013-4389: rubygem-actionmailer-31: possible DoS vulnerability in the log subscriber component bnc846239 File CVE-2013-4389.patch contains the fix. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE Security Update : rubygem-actionpack-2_3 / rubygem-activesupport-2_3 (openSUSE-SU-2012:1218-1)

added 3-0-escapehtml-activesupport.patch: bnc775653 Also encode single quote CVE-2012-3464 - added 3-0-striptags.patch: bnc775649 Do not mark striptags result as htmlsafe CVE-2012-3465 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : rubygem-actionpack-3_2 (openSUSE-SU-2014:0295-1)

rubygem-actionpack-32 was updated to fix security issues : - fix CVE-2014-0081: XSS Vulnerability in numbertocurrency, numbertopercentage and numbertohuman bnc864433 - fix CVE-2014-0082: Denial of Service Vulnerability in Action View when using render :text bnc864431 %NASLMINLEVEL 70300 C Tenable...

openSUSE Security Update : rubygem-actionpack-2_3 (openSUSE-SU-2013:1905-1)

fix CVE-2013-6415: rubygem-actionpack: numbertocurrency XSS bnc853632. File CVE-2013-6415.patch contains the patch. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-987. The text...

openSUSE Security Update : rubygem-rdoc (openSUSE-SU-2013:0303-1)

rubgem rdoc was updated to fix a security issue : CVE-2013-0256: rubygem-rdoc: XSS exploit of RDoc documentation generated by rdoc - Ensured that rd parser files are generated before checking the manifest. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

openSUSE Security Update : rubygem-devise (openSUSE-SU-2013:0374-1)

rubygem-devise was updated to version 1.5.4 fixing bugs and security issue : - wrong records may be read when sending specifically crafted requests bnc800955 CVE-2013-0233 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

openSUSE Security Update : rubygem-actionmailer (openSUSE-SU-2011:1305-1)

This update of rails fixes the following security issues : CVE-2011-2930 - SQL-injection in quotetablename function via specially crafted column names bnc712062 CVE-2011-2931 - Cross-Site Scripting XSS in the striptags helper bnc712057 CVE-2011-3186 - Response Splitting bnc712058 CVE-2010-3933 -...

openSUSE Security Update : rubygem-actionmailer (openSUSE-SU-2011:1305-1)

This update of rails fixes the following security issues : CVE-2011-2930 - SQL-injection in quotetablename function via specially crafted column names bnc712062 CVE-2011-2931 - Cross-Site Scripting XSS in the striptags helper bnc712057 CVE-2011-3186 - Response Splitting bnc712058 CVE-2010-3933 -...

openSUSE Security Update : rubygem-actionpack-3_2 (openSUSE-SU-2014:0718-1)

fix CVE-2014-0130: rubygem-actionpack: directory traversal issue bnc876714 CVE-2014-0130.patch: contains the fix %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-397. The text...

openSUSE Security Update : rubygem-actionpack-3_2 (openSUSE-SU-2014:0720-1)

fix CVE-2014-0130: rubygem-actionpack: directory traversal issue bnc876714 CVE-2014-0130.patch: contains the fix %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-396. The text...

openSUSE Security Update : rubygem-actionpack-2_3 (openSUSE-SU-2013:0662-1)

Changes in rubygem-actionpack-23 : - add 2 patches to fix security issues : - bug-8099352-3-csssanitize.patch: CVE-2013-1855: rubygem-actionpack: XSS vulnerability in sanitizecss in Action Pack bnc809935 - bug-8099402-3-sanitizeprotocol.patch: CVE-2013-1857: rubygem-actionpack: XSS Vulnerability ...

openSUSE Security Update : rubygem-actionpack-3_2 (openSUSE-SU-2013:0661-1)

Changes in rubygem-actionpack-32 : - add 2 patches to fix security issues : - bug-8099353-2-csssanitize.patch: CVE-2013-1855: rubygem-actionpack: XSS vulnerability in sanitizecss in Action Pack bnc809935 - bug-8099403-2-sanitizeprotocol.patch: CVE-2013-1857: rubygem-actionpack: XSS Vulnerability ...

Fedora Update for rubygem-actionpack FEDORA-2014-6127

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for rubygem-actionpack FEDORA-2014-6098

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 20 : rubygem-actionpack-4.0.0-4.fc20 (2014-6098)

Fix for CVE-2014-0130 - Avoid directory traversal Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

[SECURITY] Fedora 20 Update: rubygem-actionpack-4.0.0-4.fc20

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

CentOS 6 : Moderate: / ruby193-rubygem-actionpack (CESA-2014:0510)

The remote CentOS host is missing a security update which has been documented in Red Hat advisory RHSA-2014:0510. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Red Hat Security Advisory RHSA-2014:0510 and CentOS...