Lucene search
SuseOPENSUSE-SU-2016:0835-1HistoryMar 19, 2016 - 4:13 p.m.
Security update for rubygem-actionpack-3_2 (important)
2016-03-1916:13:08
lists.opensuse.org
12
0.943 High
EPSS
Percentile
99.0%
This update for rubygem-actionpack-3_2 fixes the following issues:
-
CVE-2016-2097: rubygem-actionview: Possible Information Leak
Vulnerability in Action View. (boo#968850) -
CVE-2016-2098: rubygem-actionpack: Possible remote code execution
vulnerability in Action Pack (boo#968849)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE | 13.2 | x86_64 | rubygem-actionpack-3_2 | <Β 3.2.17-3.10.1 | rubygem-actionpack-3_2-3.2.17-3.10.1.x86_64.rpm |
| openSUSE | 13.2 | i586 | rubygem-actionpack-3_2 | <Β 3.2.17-3.10.1 | rubygem-actionpack-3_2-3.2.17-3.10.1.i586.rpm |
| openSUSE | 13.2 | x86_64 | rubygem-actionpack-3_2-doc | <Β 3.2.17-3.10.1 | rubygem-actionpack-3_2-doc-3.2.17-3.10.1.x86_64.rpm |
| openSUSE | 13.2 | i586 | rubygem-actionpack-3_2-doc | <Β 3.2.17-3.10.1 | rubygem-actionpack-3_2-doc-3.2.17-3.10.1.i586.rpm |
Related
nessus
nessus
FreeBSD : rails -- multiple vulnerabilities (5a016dd0-8aa8-490e-a596-55f4cc17e4ef)
2016-03-07 00:00:00
openSUSE Security Update : rubygem-actionpack-3_2 (openSUSE-2016-369)
2016-03-21 00:00:00
Debian DSA-3509-1 : rails - security update
2016-03-10 00:00:00
suse
suse
Security update for rubygem-actionpack-3_2 (important)
2016-04-07 13:08:19
Security update for rubygem-actionview-4_1 (important)
2016-03-22 18:08:06
Security update for rubygem-actionview-4_2 (important)
2016-03-23 19:08:52
freebsd
freebsd
rails -- multiple vulnerabilities
2016-02-29 00:00:00
openvas
openvas
Debian Security Advisory DSA 3509-1 (rails - security update)
2016-03-09 00:00:00
Debian: Security Advisory (DSA-3509-1)
2016-03-08 00:00:00
ibm
ibm
redhat
redhat
(RHSA-2016:0456) Important: rh-ror41 security update
2016-03-15 00:00:00
(RHSA-2016:0455) Important: ruby193 security update
2016-03-15 00:00:00
(RHSA-2016:0454) Important: ror40 security update
2016-03-15 00:00:00
debian
debian
[SECURITY] [DSA 3509-1] rails security update
2016-03-09 17:48:46
[SECURITY] [DSA 3509-1] rails security update
2016-03-09 17:13:24
[SECURITY] [DSA 3509-1] rails security update
2016-03-09 17:48:46
osv
osv
rails - security update
2016-03-09 00:00:00
actionpack allows remote code execution via application's unrestricted use of render method
2017-10-24 18:33:35
ruby-actionpack-3.2 - security update
2016-08-28 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: rubygem-actionview-4.2.0-5.fc22
2016-03-17 21:23:47
[SECURITY] Fedora 23 Update: rubygem-actionpack-4.2.3-5.fc23
2016-03-17 20:58:04
[SECURITY] Fedora 22 Update: rubygem-actionpack-4.2.0-4.fc22
2016-03-17 21:23:47
zdt
zdt
Ruby on Rails ActionPack Inline ERB - Code Execution (Metasploit)
2016-07-11 00:00:00
ubuntucve
ubuntucve
CVE-2016-2098
2016-04-07 00:00:00
CVE-2016-2097
2016-04-07 00:00:00
seebug
seebug
Ruby on Rails Action PackθΏη¨δ»£η ζ§θ‘ζΌζ΄
2016-03-17 00:00:00
Ruby on Rails Action View δΏ‘ζ―ζ³ζΌ
2016-03-17 00:00:00
packetstorm
packetstorm
Ruby On Rails ActionPack Inline ERB Code Execution
2016-07-09 00:00:00
prion
prion
Design/Logic Flaw
2016-04-07 23:59:00
Directory traversal
2016-04-07 23:59:00
cve
cve
CVE-2016-2098
2016-04-07 23:59:00
CVE-2016-2097
2016-04-07 23:59:00
checkpoint_advisories
checkpoint_advisories
Ruby on Rails Remote Code Execution (CVE-2016-2098)
2016-07-19 00:00:00
github
github
actionpack allows remote code execution via application's unrestricted use of render method
2017-10-24 18:33:35
actionview contains Path Traversal vulnerability
2017-10-24 18:33:35
canvas
canvas
Immunity Canvas: RAILS_ACTIONPACK_RENDER
2016-04-07 23:59:00
debiancve
debiancve
CVE-2016-2098
2016-04-07 23:59:00
CVE-2016-2097
2016-04-07 23:59:00
gitlab
gitlab
Possible Information Leak Vulnerability
2016-04-07 00:00:00
rubygems
rubygems
Possible remote code execution vulnerability in Action Pack
2016-02-28 21:00:00
Possible Information Leak Vulnerability in Action View
2016-02-28 21:00:00
Possible Information Leak Vulnerability in Action View
2016-02-28 21:00:00
hackerone
hackerone
Ruby on Rails: Remote code execution using render :inline
2016-02-01 19:18:59
attackerkb
attackerkb
CVE-2016-2097
2016-04-07 00:00:00
veracode
veracode
Directory Traversal And Information Disclosure
2019-01-15 09:10:39