Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2015-7581 (GCVE-0-2015-7581)
Vulnerability from cvelistv5
Published
2016-02-16 02:00
Modified
2024-08-06 07:51
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
actionpack/lib/action_dispatch/routing/route_set.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service (superfluous caching and memory consumption) by leveraging an application's use of a wildcard controller route.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T07:51:28.559Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "[ruby-security-ann] 20160125 [CVE-2015-7581] Object leak vulnerability for wildcard controller routes in Action Pack",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://groups.google.com/forum/message/raw?msg=ruby-security-ann/dthJ5wL69JE/IdvCimtZEgAJ"
},
{
"name": "openSUSE-SU-2016:0372",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html"
},
{
"name": "[oss-security] 20160125 [CVE-2015-7581] Object leak vulnerability for wildcard controller routes in Action Pack",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2016/01/25/16"
},
{
"name": "FEDORA-2016-94e71ee673",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html"
},
{
"name": "FEDORA-2016-f486068393",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178067.html"
},
{
"name": "SUSE-SU-2016:1146",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html"
},
{
"name": "1034816",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1034816"
},
{
"name": "DSA-3464",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2016/dsa-3464"
},
{
"name": "RHSA-2016:0296",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0296.html"
},
{
"name": "81677",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/81677"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2016-01-25T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "actionpack/lib/action_dispatch/routing/route_set.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service (superfluous caching and memory consumption) by leveraging an application\u0027s use of a wildcard controller route."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-09-09T09:57:01",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "[ruby-security-ann] 20160125 [CVE-2015-7581] Object leak vulnerability for wildcard controller routes in Action Pack",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://groups.google.com/forum/message/raw?msg=ruby-security-ann/dthJ5wL69JE/IdvCimtZEgAJ"
},
{
"name": "openSUSE-SU-2016:0372",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html"
},
{
"name": "[oss-security] 20160125 [CVE-2015-7581] Object leak vulnerability for wildcard controller routes in Action Pack",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2016/01/25/16"
},
{
"name": "FEDORA-2016-94e71ee673",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html"
},
{
"name": "FEDORA-2016-f486068393",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178067.html"
},
{
"name": "SUSE-SU-2016:1146",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html"
},
{
"name": "1034816",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id/1034816"
},
{
"name": "DSA-3464",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2016/dsa-3464"
},
{
"name": "RHSA-2016:0296",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0296.html"
},
{
"name": "81677",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/81677"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2015-7581",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "actionpack/lib/action_dispatch/routing/route_set.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service (superfluous caching and memory consumption) by leveraging an application\u0027s use of a wildcard controller route."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "[ruby-security-ann] 20160125 [CVE-2015-7581] Object leak vulnerability for wildcard controller routes in Action Pack",
"refsource": "MLIST",
"url": "https://groups.google.com/forum/message/raw?msg=ruby-security-ann/dthJ5wL69JE/IdvCimtZEgAJ"
},
{
"name": "openSUSE-SU-2016:0372",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html"
},
{
"name": "[oss-security] 20160125 [CVE-2015-7581] Object leak vulnerability for wildcard controller routes in Action Pack",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2016/01/25/16"
},
{
"name": "FEDORA-2016-94e71ee673",
"refsource": "FEDORA",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html"
},
{
"name": "FEDORA-2016-f486068393",
"refsource": "FEDORA",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178067.html"
},
{
"name": "SUSE-SU-2016:1146",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html"
},
{
"name": "1034816",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1034816"
},
{
"name": "DSA-3464",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2016/dsa-3464"
},
{
"name": "RHSA-2016:0296",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0296.html"
},
{
"name": "81677",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/81677"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2015-7581",
"datePublished": "2016-02-16T02:00:00",
"dateReserved": "2015-09-29T00:00:00",
"dateUpdated": "2024-08-06T07:51:28.559Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2015-7581\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2016-02-16T02:59:04.877\",\"lastModified\":\"2025-04-12T10:46:40.837\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"actionpack/lib/action_dispatch/routing/route_set.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service (superfluous caching and memory consumption) by leveraging an application\u0027s use of a wildcard controller route.\"},{\"lang\":\"es\",\"value\":\"actionpack/lib/action_dispatch/routing/route_set.rb en Action Pack en Ruby on Rails 4.x en versiones anteriores a 4.2.5.1 y 5.x en versiones anteriores a 5.0.0.beta1.1 permite a atacantes remotos causar una denegaci\u00f3n de servicio (almacenamiento en cach\u00e9 superfluo y consumo de memoria) aprovechando el uso de una ruta de controlador comod\u00edn por una aplicaci\u00f3n.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:P\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-399\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.0.0:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"2E950E33-CD03-45F5-83F9-F106060B4A8B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.0.0:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"547C62C8-4B3E-431B-AA73-5C42ED884671\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.0.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"4CDAD329-35F7-4C82-8019-A0CF6D069059\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.0.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"56D3858B-0FEE-4E8D-83C2-68AF0431F478\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.0.1:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"254884EE-EBA4-45D0-9704-B5CB22569668\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.0.1:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"35FC7015-267C-403B-A23D-EDA6223D2104\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.0.1:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C913A56-959D-44F1-BD89-D246C66D1F09\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.0.1:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"5D5BA926-38EE-47BE-9D16-FDCF360A503B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.0.1:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"18EA25F1-279A-4F1A-883D-C064369F592E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FD794856-6F30-4ABF-8AE4-720BB75E6F89\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B4199B8B-A6F9-4BFD-8D27-0E663D8C579D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F11E76A3-FA5B-4038-AB52-3D7D5E54D8A2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"767C481D-6616-4CA9-9A9B-C994D9121796\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D5496953-0C5E-45F8-A7FB-240CEC2CCEB8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.0.6:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"CA46B621-125E-497F-B2DE-91C989B25936\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.0.6:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"B3239443-2E19-4540-BA0C-05A27E44CB6C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.0.6:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"104AC9CF-6611-4469-9852-7FDAF4EC7638\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.0.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC9E1864-B1E5-42C3-B4AF-9A002916B66D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.0.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"31AC91AA-6A9A-43B4-B3E9-A66A34B6E612\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.0.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A462C151-982E-4A83-A376-025015F40645\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.0.10:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"578CC013-776B-4868-B448-B7ACAF3AF832\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.1.0:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"C310EA3E-399A-48FD-8DE9-6950E328CF23\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.1.0:beta1:*:*:*:*:*:*\",\"matchCriteriaId\":\"293B2998-5169-4960-BEC4-21DAC837E32B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EAB8D57F-9849-428C-B8E9-D0A1020728BB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B0359DA8-6B41-46C5-AA95-41B1B366DD4A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.1.2:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"0965BDB6-9644-465C-AA32-9278B2D53197\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.1.2:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F6B15CF-37C1-4C9B-8457-4A8C9A480188\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.1.2:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"072EB16D-1325-4869-B156-65E786A834C7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"847B3C3D-8656-404D-A954-09C159EDC8E2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.1.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"65CA2D50-B33C-4088-BDDF-EB964C9A092C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.1.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CADB5989-5260-4F60-ACF2-BEB6D7F97654\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.1.6:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"509597D0-22E1-4BE8-95AD-C54FE4D15FA4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.1.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"539C550D-FEDD-415E-95AE-40E1AE2BAF1A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.1.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"59C5B869-74FC-4051-A103-A721332B3CF2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.2.0:beta1:*:*:*:*:*:*\",\"matchCriteriaId\":\"709A19A5-8FD1-4F9C-A38C-F06242A94D68\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"83F1142C-3BFB-4B72-A033-81E20DB19D02\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"81D717DB-7C80-48AA-A774-E291D2E75D6E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.2.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"06B357FB-0307-4EFA-9C5B-3C2CDEA48584\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.2.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"79D5B492-43F9-470F-BD21-6EFD93E78453\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:4.2.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F6A1C015-56AD-489C-B301-68CF1DBF1BEF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:5.0.0:beta1:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF8F94CF-D504-4165-A69E-3F1198CB162A\"}]}]}],\"references\":[{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178067.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-0296.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.debian.org/security/2016/dsa-3464\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2016/01/25/16\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/bid/81677\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securitytracker.com/id/1034816\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://groups.google.com/forum/message/raw?msg=ruby-security-ann/dthJ5wL69JE/IdvCimtZEgAJ\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178067.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-0296.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2016/dsa-3464\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2016/01/25/16\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/81677\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securitytracker.com/id/1034816\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://groups.google.com/forum/message/raw?msg=ruby-security-ann/dthJ5wL69JE/IdvCimtZEgAJ\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
ghsa-9h6g-gp95-x3q5
Vulnerability from github
Published
2017-10-24 18:33
Modified
2022-04-25 20:52
Severity ?
VLAI Severity ?
Summary
actionpack is vulnerable to denial of service because of a wildcard controller route
Details
actionpack/lib/action_dispatch/routing/route_set.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service (superfluous caching and memory consumption) by leveraging an application's use of a wildcard controller route.
{
"affected": [
{
"database_specific": {
"last_known_affected_version_range": "\u003c= 4.2.5.0"
},
"package": {
"ecosystem": "RubyGems",
"name": "actionpack"
},
"ranges": [
{
"events": [
{
"introduced": "4.0.0"
},
{
"fixed": "4.2.5.1"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2015-7581"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": true,
"github_reviewed_at": "2020-06-16T21:28:45Z",
"nvd_published_at": "2016-02-16T02:59:04Z",
"severity": "HIGH"
},
"details": "actionpack/lib/action_dispatch/routing/route_set.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service (superfluous caching and memory consumption) by leveraging an application\u0027s use of a wildcard controller route.",
"id": "GHSA-9h6g-gp95-x3q5",
"modified": "2022-04-25T20:52:00Z",
"published": "2017-10-24T18:33:36Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7581"
},
{
"type": "WEB",
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2015-7581.yml"
},
{
"type": "WEB",
"url": "https://groups.google.com/forum/#!topic/rubyonrails-security/dthJ5wL69JE"
},
{
"type": "WEB",
"url": "https://groups.google.com/forum/message/raw?msg=ruby-security-ann/dthJ5wL69JE/IdvCimtZEgAJ"
},
{
"type": "WEB",
"url": "https://web.archive.org/web/20200228001849/http://www.securityfocus.com/bid/81677"
},
{
"type": "WEB",
"url": "https://web.archive.org/web/20200516093752/http://www.securitytracker.com/id/1034816"
},
{
"type": "WEB",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html"
},
{
"type": "WEB",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178067.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0296.html"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2016/dsa-3464"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2016/01/25/16"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
],
"summary": "actionpack is vulnerable to denial of service because of a wildcard controller route"
}
RHSA-2016:0454
Vulnerability from csaf_redhat
Published
2016-03-15 20:56
Modified
2025-11-08 03:45
Summary
Red Hat Security Advisory: ror40 security update
Notes
Topic
Updated ror40-rubygem-actionpack and ror40-rubygem-activerecord packages
that fix multiple security issues are now available for Red Hat Software
Collections.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
The ror40 collection provides Ruby on Rails version 4.0. Ruby on Rails is
a model-view-controller (MVC) framework for web application development.
The following issues were corrected in rubygem-actionpack:
Multiple directory traversal flaws were found in the way the Action View
component searched for templates for rendering. If an application passed
untrusted input to the 'render' method, a remote, unauthenticated attacker
could use these flaws to render unexpected files and, possibly, execute
arbitrary code. (CVE-2016-0752, CVE-2016-2097)
A code injection flaw was found in the way the Action View component
searched for templates for rendering. If an application passed untrusted
input to the 'render' method, a remote, unauthenticated attacker could use
this flaw to execute arbitrary code. (CVE-2016-2098)
A flaw was found in the way the Action Pack component performed MIME type
lookups. Since queries were cached in a global cache of MIME types, an
attacker could use this flaw to grow the cache indefinitely, potentially
resulting in a denial of service. (CVE-2016-0751)
A flaw was found in the Action Pack component's caching of controller
references. An attacker could use this flaw to cause unbounded memory
growth, potentially resulting in a denial of service. (CVE-2015-7581)
A flaw was found in the way the Action Controller component compared user
names and passwords when performing HTTP basic authentication. Time taken
to compare strings could differ depending on input, possibly allowing a
remote attacker to determine valid user names and passwords using a timing
attack. (CVE-2015-7576)
The following issue was corrected in rubygem-activerecord:
A flaw was found in the Active Record component's handling of nested
attributes in combination with the destroy flag. An attacker could possibly
use this flaw to set attributes to invalid values or clear all attributes.
(CVE-2015-7577)
Red Hat would like to thank the Ruby on Rails project for reporting these
issues. Upstream acknowledges John Poulin as the original reporter of
CVE-2016-0752, Jyoti Singh and Tobias Kraze (makandra) as original
reporters of CVE-2016-2097, Tobias Kraze (makandra) and joernchen
(Phenoelit) as original reporters of CVE-2016-2098, Aaron Patterson (Red
Hat) as the original reporter of CVE-2016-0751, Daniel Waterworth as the
original reporter of CVE-2015-7576, and Justin Coyne as the original
reporter of CVE-2015-7577.
All ror40 collection rubygem-actionpack and rubygem-activerecord packages
users are advised to upgrade to these updated packages, which contain
backported patches to correct these issues. All running applications using
the ror40 collection must be restarted for this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated ror40-rubygem-actionpack and ror40-rubygem-activerecord packages\nthat fix multiple security issues are now available for Red Hat Software\nCollections.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The ror40 collection provides Ruby on Rails version 4.0. Ruby on Rails is\na model-view-controller (MVC) framework for web application development.\n\nThe following issues were corrected in rubygem-actionpack:\n\nMultiple directory traversal flaws were found in the way the Action View\ncomponent searched for templates for rendering. If an application passed\nuntrusted input to the \u0027render\u0027 method, a remote, unauthenticated attacker\ncould use these flaws to render unexpected files and, possibly, execute\narbitrary code. (CVE-2016-0752, CVE-2016-2097)\n\nA code injection flaw was found in the way the Action View component\nsearched for templates for rendering. If an application passed untrusted\ninput to the \u0027render\u0027 method, a remote, unauthenticated attacker could use\nthis flaw to execute arbitrary code. (CVE-2016-2098)\n\nA flaw was found in the way the Action Pack component performed MIME type\nlookups. Since queries were cached in a global cache of MIME types, an\nattacker could use this flaw to grow the cache indefinitely, potentially\nresulting in a denial of service. (CVE-2016-0751)\n\nA flaw was found in the Action Pack component\u0027s caching of controller\nreferences. An attacker could use this flaw to cause unbounded memory\ngrowth, potentially resulting in a denial of service. (CVE-2015-7581)\n\nA flaw was found in the way the Action Controller component compared user\nnames and passwords when performing HTTP basic authentication. Time taken\nto compare strings could differ depending on input, possibly allowing a\nremote attacker to determine valid user names and passwords using a timing\nattack. (CVE-2015-7576)\n\nThe following issue was corrected in rubygem-activerecord:\n\nA flaw was found in the Active Record component\u0027s handling of nested\nattributes in combination with the destroy flag. An attacker could possibly\nuse this flaw to set attributes to invalid values or clear all attributes.\n(CVE-2015-7577)\n\nRed Hat would like to thank the Ruby on Rails project for reporting these\nissues. Upstream acknowledges John Poulin as the original reporter of\nCVE-2016-0752, Jyoti Singh and Tobias Kraze (makandra) as original\nreporters of CVE-2016-2097, Tobias Kraze (makandra) and joernchen\n(Phenoelit) as original reporters of CVE-2016-2098, Aaron Patterson (Red\nHat) as the original reporter of CVE-2016-0751, Daniel Waterworth as the\noriginal reporter of CVE-2015-7576, and Justin Coyne as the original\nreporter of CVE-2015-7577.\n\nAll ror40 collection rubygem-actionpack and rubygem-activerecord packages\nusers are advised to upgrade to these updated packages, which contain\nbackported patches to correct these issues. All running applications using\nthe ror40 collection must be restarted for this update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:0454",
"url": "https://access.redhat.com/errata/RHSA-2016:0454"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1301933",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301933"
},
{
"category": "external",
"summary": "1301946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301946"
},
{
"category": "external",
"summary": "1301957",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301957"
},
{
"category": "external",
"summary": "1301963",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301963"
},
{
"category": "external",
"summary": "1301981",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301981"
},
{
"category": "external",
"summary": "1310043",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310043"
},
{
"category": "external",
"summary": "1310054",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310054"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0454.json"
}
],
"title": "Red Hat Security Advisory: ror40 security update",
"tracking": {
"current_release_date": "2025-11-08T03:45:34+00:00",
"generator": {
"date": "2025-11-08T03:45:34+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2016:0454",
"initial_release_date": "2016-03-15T20:56:17+00:00",
"revision_history": [
{
"date": "2016-03-15T20:56:17+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-03-15T20:56:17+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-08T03:45:34+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Software Collections"
},
{
"branches": [
{
"category": "product_version",
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"product": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"product_id": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activerecord@4.0.2-6.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"product": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"product_id": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activesupport@4.0.2-4.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"product": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"product_id": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-actionpack@4.0.2-7.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"product": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"product_id": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activerecord@4.0.2-6.el6?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"product": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"product_id": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activesupport@4.0.2-4.el6?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"product": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"product_id": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-actionpack@4.0.2-7.el6?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"product": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"product_id": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activerecord@4.0.2-6.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"product": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"product_id": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activerecord-doc@4.0.2-6.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"product": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"product_id": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activesupport@4.0.2-4.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"product": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"product_id": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-actionpack@4.0.2-7.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"product": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"product_id": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-actionpack-doc@4.0.2-7.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"product": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"product_id": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activerecord@4.0.2-6.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"product": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"product_id": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activerecord-doc@4.0.2-6.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"product": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"product_id": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activesupport@4.0.2-4.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"product": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"product_id": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-actionpack-doc@4.0.2-7.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"product": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"product_id": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-actionpack@4.0.2-7.el6?arch=noarch\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch"
},
"product_reference": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch"
},
"product_reference": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch"
},
"product_reference": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch"
},
"product_reference": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch"
},
"product_reference": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch"
},
"product_reference": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch"
},
"product_reference": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch"
},
"product_reference": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch"
},
"product_reference": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch"
},
"product_reference": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch"
},
"product_reference": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch"
},
"product_reference": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch"
},
"product_reference": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch"
},
"product_reference": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch"
},
"product_reference": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch"
},
"product_reference": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"Daniel Waterworth"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2015-7576",
"cwe": {
"id": "CWE-385",
"name": "Covert Timing Channel"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301933"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way the Action Controller component compared user names and passwords when performing HTTP basic authentication. Time taken to compare strings could differ depending on input, possibly allowing a remote attacker to determine valid user names and passwords using a timing attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7576"
},
{
"category": "external",
"summary": "RHBZ#1301933",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301933"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7576",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7576"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7576",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7576"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/ANv0HDHEC3k/mt7wNGxbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/ANv0HDHEC3k/mt7wNGxbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-03-15T20:56:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0454"
},
{
"category": "workaround",
"details": "Use following code to monkey-patch http_basic_authenticate_with method in ActionController:\n\n~~~\nmodule ActiveSupport\n module SecurityUtils\n def secure_compare(a, b)\n return false unless a.bytesize == b.bytesize\n\n l = a.unpack \"C#{a.bytesize}\"\n\n res = 0\n b.each_byte { |byte| res |= byte ^ l.shift }\n res == 0\n end\n module_function :secure_compare\n\n def variable_size_secure_compare(a, b)\n secure_compare(::Digest::SHA256.hexdigest(a), ::Digest::SHA256.hexdigest(b))\n end\n module_function :variable_size_secure_compare\n end\nend\n\nmodule ActionController\n class Base\n def self.http_basic_authenticate_with(options = {})\n before_action(options.except(:name, :password, :realm)) do\n authenticate_or_request_with_http_basic(options[:realm] || \"Application\") do |name, password|\n # This comparison uses \u0026 so that it doesn\u0027t short circuit and\n # uses `variable_size_secure_compare` so that length information\n # isn\u0027t leaked.\n ActiveSupport::SecurityUtils.variable_size_secure_compare(name, options[:name]) \u0026\n ActiveSupport::SecurityUtils.variable_size_secure_compare(password, options[:password])\n end\n end\n end\n end\nend\n~~~",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"Justin Coyne"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2015-7577",
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301957"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Active Record component\u0027s handling of nested attributes in combination with the destroy flag. An attacker could possibly use this flaw to set attributes to invalid values or clear all attributes.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-activerecord: Nested attributes rejection proc bypass in Active Record",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7577"
},
{
"category": "external",
"summary": "RHBZ#1301957",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301957"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7577",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7577"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/cawsWcQ6c8g/tegZtYdbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/cawsWcQ6c8g/tegZtYdbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-03-15T20:56:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0454"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-activerecord: Nested attributes rejection proc bypass in Active Record"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
}
],
"cve": "CVE-2015-7581",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301981"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Action Pack component\u0027s caching of controller references. An attacker could use this flaw to cause unbounded memory growth, potentially resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7581"
},
{
"category": "external",
"summary": "RHBZ#1301981",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301981"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7581",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7581"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7581",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7581"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/dthJ5wL69JE/YzPnFelbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/dthJ5wL69JE/YzPnFelbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-03-15T20:56:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0454"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"Aaron Patterson"
],
"organization": "Red Hat",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-0751",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301946"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way the Action Pack component performed MIME type lookups. Since queries were cached in a global cache of MIME types, an attacker could use this flaw to grow the cache indefinitely, potentially resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: possible object leak and denial of service attack in Action Pack",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0751"
},
{
"category": "external",
"summary": "RHBZ#1301946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0751",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0751"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0751",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0751"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/9oLY_FCzvoc/w9oI9XxbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/9oLY_FCzvoc/w9oI9XxbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-03-15T20:56:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0454"
},
{
"category": "workaround",
"details": "Use following code to monkey-patch mime types cache and disable caching.\n\n```\nrequire \u0027action_dispatch/http/mime_type\u0027\n\nMime.const_set :LOOKUP, Hash.new { |h,k|\n Mime::Type.new(k) unless k.blank?\n} \n```\n\nAlternatively perform filtering of mime types in the Accept header to allow only known types.",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-actionpack: possible object leak and denial of service attack in Action Pack"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"John Poulin"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-0752",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301963"
}
],
"notes": [
{
"category": "description",
"text": "A directory traversal flaw was found in the way the Action View component searched for templates for rendering. If an application passed untrusted input to the \u0027render\u0027 method, a remote, unauthenticated attacker could use this flaw to render unexpected files and, possibly, execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: directory traversal flaw in Action View",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0752"
},
{
"category": "external",
"summary": "RHBZ#1301963",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301963"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0752",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0752"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0752",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0752"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/335P1DcLG00/OfB9_LhbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/335P1DcLG00/OfB9_LhbFQAJ"
},
{
"category": "external",
"summary": "https://nvisium.com/blog/2016/01/26/rails-dynamic-render-to-rce-cve-2016-0752/",
"url": "https://nvisium.com/blog/2016/01/26/rails-dynamic-render-to-rce-cve-2016-0752/"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-03-15T20:56:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0454"
},
{
"category": "workaround",
"details": "Avoid passing untrusted input to render method, or verify the input using whitelist before passing it to the render method:\n\n```\n\ndef index\n render verify_template(params[:id])\nend\n\nprivate\ndef verify_template(name)\n # add verification logic particular to your application here\nend\n\n```",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-03-25T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "rubygem-actionpack: directory traversal flaw in Action View"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"Jyoti Singh"
],
"summary": "Acknowledged by upstream."
},
{
"names": [
"Tobias Kraze"
],
"organization": "makandra",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-2097",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2016-02-18T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1310043"
}
],
"notes": [
{
"category": "description",
"text": "A directory traversal flaw was found in the way the Action View component searched for templates for rendering. If an application passed untrusted input to the \u0027render\u0027 method, a remote, unauthenticated attacker could use this flaw to render unexpected files and, possibly, execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: directory traversal in Action View, incomplete CVE-2016-0752 fix",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2097"
},
{
"category": "external",
"summary": "RHBZ#1310043",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310043"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2097",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2097"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2097",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2097"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/ddY6HgqB2z4/we0RasMZIAAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/ddY6HgqB2z4/we0RasMZIAAJ"
}
],
"release_date": "2016-02-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-03-15T20:56:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0454"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "rubygem-actionpack: directory traversal in Action View, incomplete CVE-2016-0752 fix"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"Tobias Kraze"
],
"organization": "makandra",
"summary": "Acknowledged by upstream."
},
{
"names": [
"joernchen"
],
"organization": "Phenoelit",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-2098",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2016-02-18T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1310054"
}
],
"notes": [
{
"category": "description",
"text": "A code injection flaw was found in the way Action View component searched for templates for rendering. If an application passed untrusted input to the \u0027render\u0027 method, a remote, unauthenticated attacker could use this flaw to execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: code injection vulnerability in Action View",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2098"
},
{
"category": "external",
"summary": "RHBZ#1310054",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310054"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2098",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2098"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2098",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2098"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/ly-IH-fxr_Q/WLoOhcMZIAAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/ly-IH-fxr_Q/WLoOhcMZIAAJ"
}
],
"release_date": "2016-02-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-03-15T20:56:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0454"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "rubygem-actionpack: code injection vulnerability in Action View"
}
]
}
rhsa-2016_0296
Vulnerability from csaf_redhat
Published
2016-02-24 10:36
Modified
2024-12-15 18:43
Summary
Red Hat Security Advisory: rh-ror41 security update
Notes
Topic
Updated rh-ror41-rubygem-actionpack, rh-ror41-rubygem-actionview,
rh-ror41-rubygem-activemodel, and rh-ror41-rubygem-activerecord packages
that fix multiple security issues are now available for Red Hat Software
Collections.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
The rh-ror41 collection provides Ruby on Rails version 4.1. Ruby on Rails
is a model-view-controller (MVC) framework for web application development.
The following issue was corrected in rubygem-actionpack and
rubygem-actionview:
A directory traversal flaw was found in the way the Action View component
searched for templates for rendering. If an application passed untrusted
input to the 'render' method, a remote, unauthenticated attacker could use
this to render unexpected files and, possibly, execute arbitrary code.
(CVE-2016-0752)
The following issues were corrected in rubygem-actionpack:
A flaw was found in the way the Action Pack component performed MIME type
lookups. Since queries were cached in a global cache of MIME types, an
attacker could use this flaw to grow the cache indefinitely, potentially
resulting in a denial of service. (CVE-2016-0751)
A flaw was found in the Action Pack component's caching of controller
references. An attacker could use this flaw to cause unbounded memory
growth, potentially resulting in a denial of service. (CVE-2015-7581)
A flaw was found in the way the Action Controller component compared user
names and passwords when performing HTTP basic authentication. Time taken
to compare strings could differ depending on input, possibly allowing a
remote attacker to determine valid user names and passwords using a timing
attack. (CVE-2015-7576)
The following issue was corrected in rubygem-activerecord:
A flaw was found in the Active Record component's handling of nested
attributes in combination with the destroy flag. An attacker could possibly
use this flaw to set attributes to invalid values or clear all attributes.
(CVE-2015-7577)
The following issue was corrected in rubygem-activemodel and
rubygem-activerecord:
A flaw was found in the way the Active Model based models processed
attributes. An attacker with the ability to pass arbitrary attributes to
models could possibly use this flaw to bypass input validation.
(CVE-2016-0753)
Red Hat would like to thank the Ruby on Rails project for reporting these
issues. Upstream acknowledges John Poulin as the original reporter of
CVE-2016-0752, Aaron Patterson of Red Hat as the original reporter of
CVE-2016-0751, Daniel Waterworth as the original reporter of CVE-2015-7576,
Justin Coyne as the original reporter of CVE-2015-7577, and John Backus
from BlockScore as the original reporter of CVE-2016-0753.
All rh-ror41 collection rubygem-actionpack, rubygem-actionview,
rubygem-activemodel, and rubygem-activerecord packages users are advised to
upgrade to these updated packages, which contain backported patches to
correct these issues. All running applications using the rh-ror41
collection must be restarted for this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated rh-ror41-rubygem-actionpack, rh-ror41-rubygem-actionview,\nrh-ror41-rubygem-activemodel, and rh-ror41-rubygem-activerecord packages\nthat fix multiple security issues are now available for Red Hat Software\nCollections.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The rh-ror41 collection provides Ruby on Rails version 4.1. Ruby on Rails\nis a model-view-controller (MVC) framework for web application development.\n\nThe following issue was corrected in rubygem-actionpack and\nrubygem-actionview:\n\nA directory traversal flaw was found in the way the Action View component\nsearched for templates for rendering. If an application passed untrusted\ninput to the \u0027render\u0027 method, a remote, unauthenticated attacker could use\nthis to render unexpected files and, possibly, execute arbitrary code.\n(CVE-2016-0752)\n\nThe following issues were corrected in rubygem-actionpack:\n\nA flaw was found in the way the Action Pack component performed MIME type\nlookups. Since queries were cached in a global cache of MIME types, an\nattacker could use this flaw to grow the cache indefinitely, potentially\nresulting in a denial of service. (CVE-2016-0751)\n\nA flaw was found in the Action Pack component\u0027s caching of controller\nreferences. An attacker could use this flaw to cause unbounded memory\ngrowth, potentially resulting in a denial of service. (CVE-2015-7581)\n\nA flaw was found in the way the Action Controller component compared user\nnames and passwords when performing HTTP basic authentication. Time taken\nto compare strings could differ depending on input, possibly allowing a\nremote attacker to determine valid user names and passwords using a timing\nattack. (CVE-2015-7576)\n\nThe following issue was corrected in rubygem-activerecord:\n\nA flaw was found in the Active Record component\u0027s handling of nested\nattributes in combination with the destroy flag. An attacker could possibly\nuse this flaw to set attributes to invalid values or clear all attributes.\n(CVE-2015-7577)\n\nThe following issue was corrected in rubygem-activemodel and\nrubygem-activerecord:\n\nA flaw was found in the way the Active Model based models processed\nattributes. An attacker with the ability to pass arbitrary attributes to\nmodels could possibly use this flaw to bypass input validation.\n(CVE-2016-0753)\n\nRed Hat would like to thank the Ruby on Rails project for reporting these\nissues. Upstream acknowledges John Poulin as the original reporter of\nCVE-2016-0752, Aaron Patterson of Red Hat as the original reporter of\nCVE-2016-0751, Daniel Waterworth as the original reporter of CVE-2015-7576,\nJustin Coyne as the original reporter of CVE-2015-7577, and John Backus\nfrom BlockScore as the original reporter of CVE-2016-0753.\n\nAll rh-ror41 collection rubygem-actionpack, rubygem-actionview,\nrubygem-activemodel, and rubygem-activerecord packages users are advised to\nupgrade to these updated packages, which contain backported patches to\ncorrect these issues. All running applications using the rh-ror41\ncollection must be restarted for this update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:0296",
"url": "https://access.redhat.com/errata/RHSA-2016:0296"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1301933",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301933"
},
{
"category": "external",
"summary": "1301946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301946"
},
{
"category": "external",
"summary": "1301957",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301957"
},
{
"category": "external",
"summary": "1301963",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301963"
},
{
"category": "external",
"summary": "1301973",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301973"
},
{
"category": "external",
"summary": "1301981",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301981"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0296.json"
}
],
"title": "Red Hat Security Advisory: rh-ror41 security update",
"tracking": {
"current_release_date": "2024-12-15T18:43:39+00:00",
"generator": {
"date": "2024-12-15T18:43:39+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2016:0296",
"initial_release_date": "2016-02-24T10:36:00+00:00",
"revision_history": [
{
"date": "2016-02-24T10:36:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-02-24T10:36:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-15T18:43:39+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Software Collections"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"product_id": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionview-doc@4.1.5-4.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"product_id": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionview@4.1.5-4.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"product_id": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activemodel@4.1.5-2.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"product_id": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activemodel-doc@4.1.5-2.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"product_id": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionpack-doc@4.1.5-3.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"product_id": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionpack@4.1.5-3.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"product_id": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activerecord@4.1.5-2.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"product_id": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activerecord-doc@4.1.5-2.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"product_id": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activesupport@4.1.5-3.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"product_id": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionview@4.1.5-4.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"product_id": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionview-doc@4.1.5-4.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"product_id": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activemodel-doc@4.1.5-2.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"product_id": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activemodel@4.1.5-2.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"product_id": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionpack-doc@4.1.5-3.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"product_id": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionpack@4.1.5-3.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"product_id": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activerecord@4.1.5-2.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"product_id": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activerecord-doc@4.1.5-2.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"product_id": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activesupport@4.1.5-3.el6?arch=noarch\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"product": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"product_id": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionview@4.1.5-4.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"product": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"product_id": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activemodel@4.1.5-2.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"product": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"product_id": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionpack@4.1.5-3.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"product": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"product_id": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activerecord@4.1.5-2.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"product": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"product_id": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activesupport@4.1.5-3.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"product": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"product_id": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionview@4.1.5-4.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"product": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"product_id": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activemodel@4.1.5-2.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"product": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"product_id": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionpack@4.1.5-3.el6?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"product": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"product_id": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activerecord@4.1.5-2.el6?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"product": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"product_id": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activesupport@4.1.5-3.el6?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"Daniel Waterworth"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2015-7576",
"cwe": {
"id": "CWE-385",
"name": "Covert Timing Channel"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301933"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way the Action Controller component compared user names and passwords when performing HTTP basic authentication. Time taken to compare strings could differ depending on input, possibly allowing a remote attacker to determine valid user names and passwords using a timing attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7576"
},
{
"category": "external",
"summary": "RHBZ#1301933",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301933"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7576",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7576"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7576",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7576"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/ANv0HDHEC3k/mt7wNGxbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/ANv0HDHEC3k/mt7wNGxbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-24T10:36:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0296"
},
{
"category": "workaround",
"details": "Use following code to monkey-patch http_basic_authenticate_with method in ActionController:\n\n~~~\nmodule ActiveSupport\n module SecurityUtils\n def secure_compare(a, b)\n return false unless a.bytesize == b.bytesize\n\n l = a.unpack \"C#{a.bytesize}\"\n\n res = 0\n b.each_byte { |byte| res |= byte ^ l.shift }\n res == 0\n end\n module_function :secure_compare\n\n def variable_size_secure_compare(a, b)\n secure_compare(::Digest::SHA256.hexdigest(a), ::Digest::SHA256.hexdigest(b))\n end\n module_function :variable_size_secure_compare\n end\nend\n\nmodule ActionController\n class Base\n def self.http_basic_authenticate_with(options = {})\n before_action(options.except(:name, :password, :realm)) do\n authenticate_or_request_with_http_basic(options[:realm] || \"Application\") do |name, password|\n # This comparison uses \u0026 so that it doesn\u0027t short circuit and\n # uses `variable_size_secure_compare` so that length information\n # isn\u0027t leaked.\n ActiveSupport::SecurityUtils.variable_size_secure_compare(name, options[:name]) \u0026\n ActiveSupport::SecurityUtils.variable_size_secure_compare(password, options[:password])\n end\n end\n end\n end\nend\n~~~",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"Justin Coyne"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2015-7577",
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301957"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Active Record component\u0027s handling of nested attributes in combination with the destroy flag. An attacker could possibly use this flaw to set attributes to invalid values or clear all attributes.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-activerecord: Nested attributes rejection proc bypass in Active Record",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7577"
},
{
"category": "external",
"summary": "RHBZ#1301957",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301957"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7577",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7577"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/cawsWcQ6c8g/tegZtYdbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/cawsWcQ6c8g/tegZtYdbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-24T10:36:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0296"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-activerecord: Nested attributes rejection proc bypass in Active Record"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
}
],
"cve": "CVE-2015-7581",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301981"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Action Pack component\u0027s caching of controller references. An attacker could use this flaw to cause unbounded memory growth, potentially resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7581"
},
{
"category": "external",
"summary": "RHBZ#1301981",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301981"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7581",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7581"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7581",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7581"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/dthJ5wL69JE/YzPnFelbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/dthJ5wL69JE/YzPnFelbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-24T10:36:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0296"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"Aaron Patterson"
],
"organization": "Red Hat",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-0751",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301946"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way the Action Pack component performed MIME type lookups. Since queries were cached in a global cache of MIME types, an attacker could use this flaw to grow the cache indefinitely, potentially resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: possible object leak and denial of service attack in Action Pack",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0751"
},
{
"category": "external",
"summary": "RHBZ#1301946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0751",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0751"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0751",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0751"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/9oLY_FCzvoc/w9oI9XxbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/9oLY_FCzvoc/w9oI9XxbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-24T10:36:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0296"
},
{
"category": "workaround",
"details": "Use following code to monkey-patch mime types cache and disable caching.\n\n```\nrequire \u0027action_dispatch/http/mime_type\u0027\n\nMime.const_set :LOOKUP, Hash.new { |h,k|\n Mime::Type.new(k) unless k.blank?\n} \n```\n\nAlternatively perform filtering of mime types in the Accept header to allow only known types.",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-actionpack: possible object leak and denial of service attack in Action Pack"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"John Poulin"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-0752",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301963"
}
],
"notes": [
{
"category": "description",
"text": "A directory traversal flaw was found in the way the Action View component searched for templates for rendering. If an application passed untrusted input to the \u0027render\u0027 method, a remote, unauthenticated attacker could use this flaw to render unexpected files and, possibly, execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: directory traversal flaw in Action View",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0752"
},
{
"category": "external",
"summary": "RHBZ#1301963",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301963"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0752",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0752"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0752",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0752"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/335P1DcLG00/OfB9_LhbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/335P1DcLG00/OfB9_LhbFQAJ"
},
{
"category": "external",
"summary": "https://nvisium.com/blog/2016/01/26/rails-dynamic-render-to-rce-cve-2016-0752/",
"url": "https://nvisium.com/blog/2016/01/26/rails-dynamic-render-to-rce-cve-2016-0752/"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-24T10:36:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0296"
},
{
"category": "workaround",
"details": "Avoid passing untrusted input to render method, or verify the input using whitelist before passing it to the render method:\n\n```\n\ndef index\n render verify_template(params[:id])\nend\n\nprivate\ndef verify_template(name)\n # add verification logic particular to your application here\nend\n\n```",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-03-25T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "rubygem-actionpack: directory traversal flaw in Action View"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"John Backus"
],
"organization": "BlockScore",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-0753",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301973"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way the Active Model based models processed attributes. An attacker with the ability to pass arbitrary attributes to models could possibly use this flaw to bypass input validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-activerecord: possible input validation circumvention in Active Model",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0753"
},
{
"category": "external",
"summary": "RHBZ#1301973",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301973"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0753",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0753"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0753",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0753"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/6jQVC1geukQ/8oYETcxbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/6jQVC1geukQ/8oYETcxbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-24T10:36:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0296"
},
{
"category": "workaround",
"details": "Do not allow arbitrary attributes to be passed to models. In Rails with Strong Parameters, make sure to not call permit! method, which bypasses strong parameters protections. Outside of rails, use whitelisting to filter only allowed attributes before passing them to models.",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-activerecord: possible input validation circumvention in Active Model"
}
]
}
rhsa-2016_0454
Vulnerability from csaf_redhat
Published
2016-03-15 20:56
Modified
2024-12-15 18:43
Summary
Red Hat Security Advisory: ror40 security update
Notes
Topic
Updated ror40-rubygem-actionpack and ror40-rubygem-activerecord packages
that fix multiple security issues are now available for Red Hat Software
Collections.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
The ror40 collection provides Ruby on Rails version 4.0. Ruby on Rails is
a model-view-controller (MVC) framework for web application development.
The following issues were corrected in rubygem-actionpack:
Multiple directory traversal flaws were found in the way the Action View
component searched for templates for rendering. If an application passed
untrusted input to the 'render' method, a remote, unauthenticated attacker
could use these flaws to render unexpected files and, possibly, execute
arbitrary code. (CVE-2016-0752, CVE-2016-2097)
A code injection flaw was found in the way the Action View component
searched for templates for rendering. If an application passed untrusted
input to the 'render' method, a remote, unauthenticated attacker could use
this flaw to execute arbitrary code. (CVE-2016-2098)
A flaw was found in the way the Action Pack component performed MIME type
lookups. Since queries were cached in a global cache of MIME types, an
attacker could use this flaw to grow the cache indefinitely, potentially
resulting in a denial of service. (CVE-2016-0751)
A flaw was found in the Action Pack component's caching of controller
references. An attacker could use this flaw to cause unbounded memory
growth, potentially resulting in a denial of service. (CVE-2015-7581)
A flaw was found in the way the Action Controller component compared user
names and passwords when performing HTTP basic authentication. Time taken
to compare strings could differ depending on input, possibly allowing a
remote attacker to determine valid user names and passwords using a timing
attack. (CVE-2015-7576)
The following issue was corrected in rubygem-activerecord:
A flaw was found in the Active Record component's handling of nested
attributes in combination with the destroy flag. An attacker could possibly
use this flaw to set attributes to invalid values or clear all attributes.
(CVE-2015-7577)
Red Hat would like to thank the Ruby on Rails project for reporting these
issues. Upstream acknowledges John Poulin as the original reporter of
CVE-2016-0752, Jyoti Singh and Tobias Kraze (makandra) as original
reporters of CVE-2016-2097, Tobias Kraze (makandra) and joernchen
(Phenoelit) as original reporters of CVE-2016-2098, Aaron Patterson (Red
Hat) as the original reporter of CVE-2016-0751, Daniel Waterworth as the
original reporter of CVE-2015-7576, and Justin Coyne as the original
reporter of CVE-2015-7577.
All ror40 collection rubygem-actionpack and rubygem-activerecord packages
users are advised to upgrade to these updated packages, which contain
backported patches to correct these issues. All running applications using
the ror40 collection must be restarted for this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated ror40-rubygem-actionpack and ror40-rubygem-activerecord packages\nthat fix multiple security issues are now available for Red Hat Software\nCollections.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The ror40 collection provides Ruby on Rails version 4.0. Ruby on Rails is\na model-view-controller (MVC) framework for web application development.\n\nThe following issues were corrected in rubygem-actionpack:\n\nMultiple directory traversal flaws were found in the way the Action View\ncomponent searched for templates for rendering. If an application passed\nuntrusted input to the \u0027render\u0027 method, a remote, unauthenticated attacker\ncould use these flaws to render unexpected files and, possibly, execute\narbitrary code. (CVE-2016-0752, CVE-2016-2097)\n\nA code injection flaw was found in the way the Action View component\nsearched for templates for rendering. If an application passed untrusted\ninput to the \u0027render\u0027 method, a remote, unauthenticated attacker could use\nthis flaw to execute arbitrary code. (CVE-2016-2098)\n\nA flaw was found in the way the Action Pack component performed MIME type\nlookups. Since queries were cached in a global cache of MIME types, an\nattacker could use this flaw to grow the cache indefinitely, potentially\nresulting in a denial of service. (CVE-2016-0751)\n\nA flaw was found in the Action Pack component\u0027s caching of controller\nreferences. An attacker could use this flaw to cause unbounded memory\ngrowth, potentially resulting in a denial of service. (CVE-2015-7581)\n\nA flaw was found in the way the Action Controller component compared user\nnames and passwords when performing HTTP basic authentication. Time taken\nto compare strings could differ depending on input, possibly allowing a\nremote attacker to determine valid user names and passwords using a timing\nattack. (CVE-2015-7576)\n\nThe following issue was corrected in rubygem-activerecord:\n\nA flaw was found in the Active Record component\u0027s handling of nested\nattributes in combination with the destroy flag. An attacker could possibly\nuse this flaw to set attributes to invalid values or clear all attributes.\n(CVE-2015-7577)\n\nRed Hat would like to thank the Ruby on Rails project for reporting these\nissues. Upstream acknowledges John Poulin as the original reporter of\nCVE-2016-0752, Jyoti Singh and Tobias Kraze (makandra) as original\nreporters of CVE-2016-2097, Tobias Kraze (makandra) and joernchen\n(Phenoelit) as original reporters of CVE-2016-2098, Aaron Patterson (Red\nHat) as the original reporter of CVE-2016-0751, Daniel Waterworth as the\noriginal reporter of CVE-2015-7576, and Justin Coyne as the original\nreporter of CVE-2015-7577.\n\nAll ror40 collection rubygem-actionpack and rubygem-activerecord packages\nusers are advised to upgrade to these updated packages, which contain\nbackported patches to correct these issues. All running applications using\nthe ror40 collection must be restarted for this update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:0454",
"url": "https://access.redhat.com/errata/RHSA-2016:0454"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1301933",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301933"
},
{
"category": "external",
"summary": "1301946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301946"
},
{
"category": "external",
"summary": "1301957",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301957"
},
{
"category": "external",
"summary": "1301963",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301963"
},
{
"category": "external",
"summary": "1301981",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301981"
},
{
"category": "external",
"summary": "1310043",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310043"
},
{
"category": "external",
"summary": "1310054",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310054"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0454.json"
}
],
"title": "Red Hat Security Advisory: ror40 security update",
"tracking": {
"current_release_date": "2024-12-15T18:43:45+00:00",
"generator": {
"date": "2024-12-15T18:43:45+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2016:0454",
"initial_release_date": "2016-03-15T20:56:17+00:00",
"revision_history": [
{
"date": "2016-03-15T20:56:17+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-03-15T20:56:17+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-15T18:43:45+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Software Collections"
},
{
"branches": [
{
"category": "product_version",
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"product": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"product_id": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activerecord@4.0.2-6.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"product": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"product_id": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activesupport@4.0.2-4.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"product": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"product_id": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-actionpack@4.0.2-7.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"product": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"product_id": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activerecord@4.0.2-6.el6?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"product": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"product_id": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activesupport@4.0.2-4.el6?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"product": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"product_id": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-actionpack@4.0.2-7.el6?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"product": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"product_id": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activerecord@4.0.2-6.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"product": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"product_id": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activerecord-doc@4.0.2-6.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"product": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"product_id": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activesupport@4.0.2-4.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"product": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"product_id": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-actionpack@4.0.2-7.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"product": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"product_id": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-actionpack-doc@4.0.2-7.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"product": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"product_id": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activerecord@4.0.2-6.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"product": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"product_id": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activerecord-doc@4.0.2-6.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"product": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"product_id": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activesupport@4.0.2-4.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"product": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"product_id": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-actionpack-doc@4.0.2-7.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"product": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"product_id": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-actionpack@4.0.2-7.el6?arch=noarch\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch"
},
"product_reference": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch"
},
"product_reference": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch"
},
"product_reference": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch"
},
"product_reference": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch"
},
"product_reference": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch"
},
"product_reference": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch"
},
"product_reference": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch"
},
"product_reference": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch"
},
"product_reference": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch"
},
"product_reference": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch"
},
"product_reference": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch"
},
"product_reference": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch"
},
"product_reference": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch"
},
"product_reference": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch"
},
"product_reference": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch"
},
"product_reference": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"Daniel Waterworth"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2015-7576",
"cwe": {
"id": "CWE-385",
"name": "Covert Timing Channel"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301933"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way the Action Controller component compared user names and passwords when performing HTTP basic authentication. Time taken to compare strings could differ depending on input, possibly allowing a remote attacker to determine valid user names and passwords using a timing attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7576"
},
{
"category": "external",
"summary": "RHBZ#1301933",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301933"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7576",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7576"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7576",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7576"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/ANv0HDHEC3k/mt7wNGxbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/ANv0HDHEC3k/mt7wNGxbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-03-15T20:56:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0454"
},
{
"category": "workaround",
"details": "Use following code to monkey-patch http_basic_authenticate_with method in ActionController:\n\n~~~\nmodule ActiveSupport\n module SecurityUtils\n def secure_compare(a, b)\n return false unless a.bytesize == b.bytesize\n\n l = a.unpack \"C#{a.bytesize}\"\n\n res = 0\n b.each_byte { |byte| res |= byte ^ l.shift }\n res == 0\n end\n module_function :secure_compare\n\n def variable_size_secure_compare(a, b)\n secure_compare(::Digest::SHA256.hexdigest(a), ::Digest::SHA256.hexdigest(b))\n end\n module_function :variable_size_secure_compare\n end\nend\n\nmodule ActionController\n class Base\n def self.http_basic_authenticate_with(options = {})\n before_action(options.except(:name, :password, :realm)) do\n authenticate_or_request_with_http_basic(options[:realm] || \"Application\") do |name, password|\n # This comparison uses \u0026 so that it doesn\u0027t short circuit and\n # uses `variable_size_secure_compare` so that length information\n # isn\u0027t leaked.\n ActiveSupport::SecurityUtils.variable_size_secure_compare(name, options[:name]) \u0026\n ActiveSupport::SecurityUtils.variable_size_secure_compare(password, options[:password])\n end\n end\n end\n end\nend\n~~~",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"Justin Coyne"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2015-7577",
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301957"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Active Record component\u0027s handling of nested attributes in combination with the destroy flag. An attacker could possibly use this flaw to set attributes to invalid values or clear all attributes.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-activerecord: Nested attributes rejection proc bypass in Active Record",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7577"
},
{
"category": "external",
"summary": "RHBZ#1301957",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301957"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7577",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7577"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/cawsWcQ6c8g/tegZtYdbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/cawsWcQ6c8g/tegZtYdbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-03-15T20:56:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0454"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-activerecord: Nested attributes rejection proc bypass in Active Record"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
}
],
"cve": "CVE-2015-7581",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301981"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Action Pack component\u0027s caching of controller references. An attacker could use this flaw to cause unbounded memory growth, potentially resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7581"
},
{
"category": "external",
"summary": "RHBZ#1301981",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301981"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7581",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7581"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7581",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7581"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/dthJ5wL69JE/YzPnFelbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/dthJ5wL69JE/YzPnFelbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-03-15T20:56:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0454"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"Aaron Patterson"
],
"organization": "Red Hat",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-0751",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301946"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way the Action Pack component performed MIME type lookups. Since queries were cached in a global cache of MIME types, an attacker could use this flaw to grow the cache indefinitely, potentially resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: possible object leak and denial of service attack in Action Pack",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0751"
},
{
"category": "external",
"summary": "RHBZ#1301946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0751",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0751"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0751",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0751"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/9oLY_FCzvoc/w9oI9XxbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/9oLY_FCzvoc/w9oI9XxbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-03-15T20:56:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0454"
},
{
"category": "workaround",
"details": "Use following code to monkey-patch mime types cache and disable caching.\n\n```\nrequire \u0027action_dispatch/http/mime_type\u0027\n\nMime.const_set :LOOKUP, Hash.new { |h,k|\n Mime::Type.new(k) unless k.blank?\n} \n```\n\nAlternatively perform filtering of mime types in the Accept header to allow only known types.",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-actionpack: possible object leak and denial of service attack in Action Pack"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"John Poulin"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-0752",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301963"
}
],
"notes": [
{
"category": "description",
"text": "A directory traversal flaw was found in the way the Action View component searched for templates for rendering. If an application passed untrusted input to the \u0027render\u0027 method, a remote, unauthenticated attacker could use this flaw to render unexpected files and, possibly, execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: directory traversal flaw in Action View",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0752"
},
{
"category": "external",
"summary": "RHBZ#1301963",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301963"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0752",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0752"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0752",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0752"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/335P1DcLG00/OfB9_LhbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/335P1DcLG00/OfB9_LhbFQAJ"
},
{
"category": "external",
"summary": "https://nvisium.com/blog/2016/01/26/rails-dynamic-render-to-rce-cve-2016-0752/",
"url": "https://nvisium.com/blog/2016/01/26/rails-dynamic-render-to-rce-cve-2016-0752/"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-03-15T20:56:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0454"
},
{
"category": "workaround",
"details": "Avoid passing untrusted input to render method, or verify the input using whitelist before passing it to the render method:\n\n```\n\ndef index\n render verify_template(params[:id])\nend\n\nprivate\ndef verify_template(name)\n # add verification logic particular to your application here\nend\n\n```",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-03-25T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "rubygem-actionpack: directory traversal flaw in Action View"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"Jyoti Singh"
],
"summary": "Acknowledged by upstream."
},
{
"names": [
"Tobias Kraze"
],
"organization": "makandra",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-2097",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2016-02-18T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1310043"
}
],
"notes": [
{
"category": "description",
"text": "A directory traversal flaw was found in the way the Action View component searched for templates for rendering. If an application passed untrusted input to the \u0027render\u0027 method, a remote, unauthenticated attacker could use this flaw to render unexpected files and, possibly, execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: directory traversal in Action View, incomplete CVE-2016-0752 fix",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2097"
},
{
"category": "external",
"summary": "RHBZ#1310043",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310043"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2097",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2097"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2097",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2097"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/ddY6HgqB2z4/we0RasMZIAAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/ddY6HgqB2z4/we0RasMZIAAJ"
}
],
"release_date": "2016-02-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-03-15T20:56:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0454"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "rubygem-actionpack: directory traversal in Action View, incomplete CVE-2016-0752 fix"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"Tobias Kraze"
],
"organization": "makandra",
"summary": "Acknowledged by upstream."
},
{
"names": [
"joernchen"
],
"organization": "Phenoelit",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-2098",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2016-02-18T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1310054"
}
],
"notes": [
{
"category": "description",
"text": "A code injection flaw was found in the way Action View component searched for templates for rendering. If an application passed untrusted input to the \u0027render\u0027 method, a remote, unauthenticated attacker could use this flaw to execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: code injection vulnerability in Action View",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2098"
},
{
"category": "external",
"summary": "RHBZ#1310054",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310054"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2098",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2098"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2098",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2098"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/ly-IH-fxr_Q/WLoOhcMZIAAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/ly-IH-fxr_Q/WLoOhcMZIAAJ"
}
],
"release_date": "2016-02-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-03-15T20:56:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0454"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "rubygem-actionpack: code injection vulnerability in Action View"
}
]
}
RHSA-2016:0296
Vulnerability from csaf_redhat
Published
2016-02-24 10:36
Modified
2025-11-08 03:45
Summary
Red Hat Security Advisory: rh-ror41 security update
Notes
Topic
Updated rh-ror41-rubygem-actionpack, rh-ror41-rubygem-actionview,
rh-ror41-rubygem-activemodel, and rh-ror41-rubygem-activerecord packages
that fix multiple security issues are now available for Red Hat Software
Collections.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
The rh-ror41 collection provides Ruby on Rails version 4.1. Ruby on Rails
is a model-view-controller (MVC) framework for web application development.
The following issue was corrected in rubygem-actionpack and
rubygem-actionview:
A directory traversal flaw was found in the way the Action View component
searched for templates for rendering. If an application passed untrusted
input to the 'render' method, a remote, unauthenticated attacker could use
this to render unexpected files and, possibly, execute arbitrary code.
(CVE-2016-0752)
The following issues were corrected in rubygem-actionpack:
A flaw was found in the way the Action Pack component performed MIME type
lookups. Since queries were cached in a global cache of MIME types, an
attacker could use this flaw to grow the cache indefinitely, potentially
resulting in a denial of service. (CVE-2016-0751)
A flaw was found in the Action Pack component's caching of controller
references. An attacker could use this flaw to cause unbounded memory
growth, potentially resulting in a denial of service. (CVE-2015-7581)
A flaw was found in the way the Action Controller component compared user
names and passwords when performing HTTP basic authentication. Time taken
to compare strings could differ depending on input, possibly allowing a
remote attacker to determine valid user names and passwords using a timing
attack. (CVE-2015-7576)
The following issue was corrected in rubygem-activerecord:
A flaw was found in the Active Record component's handling of nested
attributes in combination with the destroy flag. An attacker could possibly
use this flaw to set attributes to invalid values or clear all attributes.
(CVE-2015-7577)
The following issue was corrected in rubygem-activemodel and
rubygem-activerecord:
A flaw was found in the way the Active Model based models processed
attributes. An attacker with the ability to pass arbitrary attributes to
models could possibly use this flaw to bypass input validation.
(CVE-2016-0753)
Red Hat would like to thank the Ruby on Rails project for reporting these
issues. Upstream acknowledges John Poulin as the original reporter of
CVE-2016-0752, Aaron Patterson of Red Hat as the original reporter of
CVE-2016-0751, Daniel Waterworth as the original reporter of CVE-2015-7576,
Justin Coyne as the original reporter of CVE-2015-7577, and John Backus
from BlockScore as the original reporter of CVE-2016-0753.
All rh-ror41 collection rubygem-actionpack, rubygem-actionview,
rubygem-activemodel, and rubygem-activerecord packages users are advised to
upgrade to these updated packages, which contain backported patches to
correct these issues. All running applications using the rh-ror41
collection must be restarted for this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated rh-ror41-rubygem-actionpack, rh-ror41-rubygem-actionview,\nrh-ror41-rubygem-activemodel, and rh-ror41-rubygem-activerecord packages\nthat fix multiple security issues are now available for Red Hat Software\nCollections.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The rh-ror41 collection provides Ruby on Rails version 4.1. Ruby on Rails\nis a model-view-controller (MVC) framework for web application development.\n\nThe following issue was corrected in rubygem-actionpack and\nrubygem-actionview:\n\nA directory traversal flaw was found in the way the Action View component\nsearched for templates for rendering. If an application passed untrusted\ninput to the \u0027render\u0027 method, a remote, unauthenticated attacker could use\nthis to render unexpected files and, possibly, execute arbitrary code.\n(CVE-2016-0752)\n\nThe following issues were corrected in rubygem-actionpack:\n\nA flaw was found in the way the Action Pack component performed MIME type\nlookups. Since queries were cached in a global cache of MIME types, an\nattacker could use this flaw to grow the cache indefinitely, potentially\nresulting in a denial of service. (CVE-2016-0751)\n\nA flaw was found in the Action Pack component\u0027s caching of controller\nreferences. An attacker could use this flaw to cause unbounded memory\ngrowth, potentially resulting in a denial of service. (CVE-2015-7581)\n\nA flaw was found in the way the Action Controller component compared user\nnames and passwords when performing HTTP basic authentication. Time taken\nto compare strings could differ depending on input, possibly allowing a\nremote attacker to determine valid user names and passwords using a timing\nattack. (CVE-2015-7576)\n\nThe following issue was corrected in rubygem-activerecord:\n\nA flaw was found in the Active Record component\u0027s handling of nested\nattributes in combination with the destroy flag. An attacker could possibly\nuse this flaw to set attributes to invalid values or clear all attributes.\n(CVE-2015-7577)\n\nThe following issue was corrected in rubygem-activemodel and\nrubygem-activerecord:\n\nA flaw was found in the way the Active Model based models processed\nattributes. An attacker with the ability to pass arbitrary attributes to\nmodels could possibly use this flaw to bypass input validation.\n(CVE-2016-0753)\n\nRed Hat would like to thank the Ruby on Rails project for reporting these\nissues. Upstream acknowledges John Poulin as the original reporter of\nCVE-2016-0752, Aaron Patterson of Red Hat as the original reporter of\nCVE-2016-0751, Daniel Waterworth as the original reporter of CVE-2015-7576,\nJustin Coyne as the original reporter of CVE-2015-7577, and John Backus\nfrom BlockScore as the original reporter of CVE-2016-0753.\n\nAll rh-ror41 collection rubygem-actionpack, rubygem-actionview,\nrubygem-activemodel, and rubygem-activerecord packages users are advised to\nupgrade to these updated packages, which contain backported patches to\ncorrect these issues. All running applications using the rh-ror41\ncollection must be restarted for this update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:0296",
"url": "https://access.redhat.com/errata/RHSA-2016:0296"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1301933",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301933"
},
{
"category": "external",
"summary": "1301946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301946"
},
{
"category": "external",
"summary": "1301957",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301957"
},
{
"category": "external",
"summary": "1301963",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301963"
},
{
"category": "external",
"summary": "1301973",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301973"
},
{
"category": "external",
"summary": "1301981",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301981"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0296.json"
}
],
"title": "Red Hat Security Advisory: rh-ror41 security update",
"tracking": {
"current_release_date": "2025-11-08T03:45:33+00:00",
"generator": {
"date": "2025-11-08T03:45:33+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2016:0296",
"initial_release_date": "2016-02-24T10:36:00+00:00",
"revision_history": [
{
"date": "2016-02-24T10:36:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-02-24T10:36:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-08T03:45:33+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Software Collections"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"product_id": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionview-doc@4.1.5-4.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"product_id": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionview@4.1.5-4.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"product_id": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activemodel@4.1.5-2.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"product_id": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activemodel-doc@4.1.5-2.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"product_id": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionpack-doc@4.1.5-3.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"product_id": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionpack@4.1.5-3.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"product_id": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activerecord@4.1.5-2.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"product_id": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activerecord-doc@4.1.5-2.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"product_id": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activesupport@4.1.5-3.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"product_id": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionview@4.1.5-4.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"product_id": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionview-doc@4.1.5-4.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"product_id": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activemodel-doc@4.1.5-2.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"product_id": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activemodel@4.1.5-2.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"product_id": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionpack-doc@4.1.5-3.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"product_id": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionpack@4.1.5-3.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"product_id": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activerecord@4.1.5-2.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"product_id": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activerecord-doc@4.1.5-2.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"product_id": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activesupport@4.1.5-3.el6?arch=noarch\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"product": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"product_id": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionview@4.1.5-4.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"product": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"product_id": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activemodel@4.1.5-2.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"product": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"product_id": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionpack@4.1.5-3.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"product": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"product_id": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activerecord@4.1.5-2.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"product": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"product_id": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activesupport@4.1.5-3.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"product": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"product_id": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionview@4.1.5-4.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"product": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"product_id": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activemodel@4.1.5-2.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"product": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"product_id": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionpack@4.1.5-3.el6?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"product": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"product_id": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activerecord@4.1.5-2.el6?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"product": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"product_id": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activesupport@4.1.5-3.el6?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"Daniel Waterworth"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2015-7576",
"cwe": {
"id": "CWE-385",
"name": "Covert Timing Channel"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301933"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way the Action Controller component compared user names and passwords when performing HTTP basic authentication. Time taken to compare strings could differ depending on input, possibly allowing a remote attacker to determine valid user names and passwords using a timing attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7576"
},
{
"category": "external",
"summary": "RHBZ#1301933",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301933"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7576",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7576"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7576",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7576"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/ANv0HDHEC3k/mt7wNGxbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/ANv0HDHEC3k/mt7wNGxbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-24T10:36:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0296"
},
{
"category": "workaround",
"details": "Use following code to monkey-patch http_basic_authenticate_with method in ActionController:\n\n~~~\nmodule ActiveSupport\n module SecurityUtils\n def secure_compare(a, b)\n return false unless a.bytesize == b.bytesize\n\n l = a.unpack \"C#{a.bytesize}\"\n\n res = 0\n b.each_byte { |byte| res |= byte ^ l.shift }\n res == 0\n end\n module_function :secure_compare\n\n def variable_size_secure_compare(a, b)\n secure_compare(::Digest::SHA256.hexdigest(a), ::Digest::SHA256.hexdigest(b))\n end\n module_function :variable_size_secure_compare\n end\nend\n\nmodule ActionController\n class Base\n def self.http_basic_authenticate_with(options = {})\n before_action(options.except(:name, :password, :realm)) do\n authenticate_or_request_with_http_basic(options[:realm] || \"Application\") do |name, password|\n # This comparison uses \u0026 so that it doesn\u0027t short circuit and\n # uses `variable_size_secure_compare` so that length information\n # isn\u0027t leaked.\n ActiveSupport::SecurityUtils.variable_size_secure_compare(name, options[:name]) \u0026\n ActiveSupport::SecurityUtils.variable_size_secure_compare(password, options[:password])\n end\n end\n end\n end\nend\n~~~",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"Justin Coyne"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2015-7577",
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301957"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Active Record component\u0027s handling of nested attributes in combination with the destroy flag. An attacker could possibly use this flaw to set attributes to invalid values or clear all attributes.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-activerecord: Nested attributes rejection proc bypass in Active Record",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7577"
},
{
"category": "external",
"summary": "RHBZ#1301957",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301957"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7577",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7577"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/cawsWcQ6c8g/tegZtYdbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/cawsWcQ6c8g/tegZtYdbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-24T10:36:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0296"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-activerecord: Nested attributes rejection proc bypass in Active Record"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
}
],
"cve": "CVE-2015-7581",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301981"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Action Pack component\u0027s caching of controller references. An attacker could use this flaw to cause unbounded memory growth, potentially resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7581"
},
{
"category": "external",
"summary": "RHBZ#1301981",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301981"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7581",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7581"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7581",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7581"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/dthJ5wL69JE/YzPnFelbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/dthJ5wL69JE/YzPnFelbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-24T10:36:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0296"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"Aaron Patterson"
],
"organization": "Red Hat",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-0751",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301946"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way the Action Pack component performed MIME type lookups. Since queries were cached in a global cache of MIME types, an attacker could use this flaw to grow the cache indefinitely, potentially resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: possible object leak and denial of service attack in Action Pack",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0751"
},
{
"category": "external",
"summary": "RHBZ#1301946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0751",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0751"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0751",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0751"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/9oLY_FCzvoc/w9oI9XxbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/9oLY_FCzvoc/w9oI9XxbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-24T10:36:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0296"
},
{
"category": "workaround",
"details": "Use following code to monkey-patch mime types cache and disable caching.\n\n```\nrequire \u0027action_dispatch/http/mime_type\u0027\n\nMime.const_set :LOOKUP, Hash.new { |h,k|\n Mime::Type.new(k) unless k.blank?\n} \n```\n\nAlternatively perform filtering of mime types in the Accept header to allow only known types.",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-actionpack: possible object leak and denial of service attack in Action Pack"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"John Poulin"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-0752",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301963"
}
],
"notes": [
{
"category": "description",
"text": "A directory traversal flaw was found in the way the Action View component searched for templates for rendering. If an application passed untrusted input to the \u0027render\u0027 method, a remote, unauthenticated attacker could use this flaw to render unexpected files and, possibly, execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: directory traversal flaw in Action View",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0752"
},
{
"category": "external",
"summary": "RHBZ#1301963",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301963"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0752",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0752"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0752",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0752"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/335P1DcLG00/OfB9_LhbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/335P1DcLG00/OfB9_LhbFQAJ"
},
{
"category": "external",
"summary": "https://nvisium.com/blog/2016/01/26/rails-dynamic-render-to-rce-cve-2016-0752/",
"url": "https://nvisium.com/blog/2016/01/26/rails-dynamic-render-to-rce-cve-2016-0752/"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-24T10:36:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0296"
},
{
"category": "workaround",
"details": "Avoid passing untrusted input to render method, or verify the input using whitelist before passing it to the render method:\n\n```\n\ndef index\n render verify_template(params[:id])\nend\n\nprivate\ndef verify_template(name)\n # add verification logic particular to your application here\nend\n\n```",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-03-25T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "rubygem-actionpack: directory traversal flaw in Action View"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"John Backus"
],
"organization": "BlockScore",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-0753",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301973"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way the Active Model based models processed attributes. An attacker with the ability to pass arbitrary attributes to models could possibly use this flaw to bypass input validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-activerecord: possible input validation circumvention in Active Model",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0753"
},
{
"category": "external",
"summary": "RHBZ#1301973",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301973"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0753",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0753"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0753",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0753"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/6jQVC1geukQ/8oYETcxbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/6jQVC1geukQ/8oYETcxbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-24T10:36:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0296"
},
{
"category": "workaround",
"details": "Do not allow arbitrary attributes to be passed to models. In Rails with Strong Parameters, make sure to not call permit! method, which bypasses strong parameters protections. Outside of rails, use whitelisting to filter only allowed attributes before passing them to models.",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-activerecord: possible input validation circumvention in Active Model"
}
]
}
rhsa-2016:0454
Vulnerability from csaf_redhat
Published
2016-03-15 20:56
Modified
2025-11-08 03:45
Summary
Red Hat Security Advisory: ror40 security update
Notes
Topic
Updated ror40-rubygem-actionpack and ror40-rubygem-activerecord packages
that fix multiple security issues are now available for Red Hat Software
Collections.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
The ror40 collection provides Ruby on Rails version 4.0. Ruby on Rails is
a model-view-controller (MVC) framework for web application development.
The following issues were corrected in rubygem-actionpack:
Multiple directory traversal flaws were found in the way the Action View
component searched for templates for rendering. If an application passed
untrusted input to the 'render' method, a remote, unauthenticated attacker
could use these flaws to render unexpected files and, possibly, execute
arbitrary code. (CVE-2016-0752, CVE-2016-2097)
A code injection flaw was found in the way the Action View component
searched for templates for rendering. If an application passed untrusted
input to the 'render' method, a remote, unauthenticated attacker could use
this flaw to execute arbitrary code. (CVE-2016-2098)
A flaw was found in the way the Action Pack component performed MIME type
lookups. Since queries were cached in a global cache of MIME types, an
attacker could use this flaw to grow the cache indefinitely, potentially
resulting in a denial of service. (CVE-2016-0751)
A flaw was found in the Action Pack component's caching of controller
references. An attacker could use this flaw to cause unbounded memory
growth, potentially resulting in a denial of service. (CVE-2015-7581)
A flaw was found in the way the Action Controller component compared user
names and passwords when performing HTTP basic authentication. Time taken
to compare strings could differ depending on input, possibly allowing a
remote attacker to determine valid user names and passwords using a timing
attack. (CVE-2015-7576)
The following issue was corrected in rubygem-activerecord:
A flaw was found in the Active Record component's handling of nested
attributes in combination with the destroy flag. An attacker could possibly
use this flaw to set attributes to invalid values or clear all attributes.
(CVE-2015-7577)
Red Hat would like to thank the Ruby on Rails project for reporting these
issues. Upstream acknowledges John Poulin as the original reporter of
CVE-2016-0752, Jyoti Singh and Tobias Kraze (makandra) as original
reporters of CVE-2016-2097, Tobias Kraze (makandra) and joernchen
(Phenoelit) as original reporters of CVE-2016-2098, Aaron Patterson (Red
Hat) as the original reporter of CVE-2016-0751, Daniel Waterworth as the
original reporter of CVE-2015-7576, and Justin Coyne as the original
reporter of CVE-2015-7577.
All ror40 collection rubygem-actionpack and rubygem-activerecord packages
users are advised to upgrade to these updated packages, which contain
backported patches to correct these issues. All running applications using
the ror40 collection must be restarted for this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated ror40-rubygem-actionpack and ror40-rubygem-activerecord packages\nthat fix multiple security issues are now available for Red Hat Software\nCollections.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The ror40 collection provides Ruby on Rails version 4.0. Ruby on Rails is\na model-view-controller (MVC) framework for web application development.\n\nThe following issues were corrected in rubygem-actionpack:\n\nMultiple directory traversal flaws were found in the way the Action View\ncomponent searched for templates for rendering. If an application passed\nuntrusted input to the \u0027render\u0027 method, a remote, unauthenticated attacker\ncould use these flaws to render unexpected files and, possibly, execute\narbitrary code. (CVE-2016-0752, CVE-2016-2097)\n\nA code injection flaw was found in the way the Action View component\nsearched for templates for rendering. If an application passed untrusted\ninput to the \u0027render\u0027 method, a remote, unauthenticated attacker could use\nthis flaw to execute arbitrary code. (CVE-2016-2098)\n\nA flaw was found in the way the Action Pack component performed MIME type\nlookups. Since queries were cached in a global cache of MIME types, an\nattacker could use this flaw to grow the cache indefinitely, potentially\nresulting in a denial of service. (CVE-2016-0751)\n\nA flaw was found in the Action Pack component\u0027s caching of controller\nreferences. An attacker could use this flaw to cause unbounded memory\ngrowth, potentially resulting in a denial of service. (CVE-2015-7581)\n\nA flaw was found in the way the Action Controller component compared user\nnames and passwords when performing HTTP basic authentication. Time taken\nto compare strings could differ depending on input, possibly allowing a\nremote attacker to determine valid user names and passwords using a timing\nattack. (CVE-2015-7576)\n\nThe following issue was corrected in rubygem-activerecord:\n\nA flaw was found in the Active Record component\u0027s handling of nested\nattributes in combination with the destroy flag. An attacker could possibly\nuse this flaw to set attributes to invalid values or clear all attributes.\n(CVE-2015-7577)\n\nRed Hat would like to thank the Ruby on Rails project for reporting these\nissues. Upstream acknowledges John Poulin as the original reporter of\nCVE-2016-0752, Jyoti Singh and Tobias Kraze (makandra) as original\nreporters of CVE-2016-2097, Tobias Kraze (makandra) and joernchen\n(Phenoelit) as original reporters of CVE-2016-2098, Aaron Patterson (Red\nHat) as the original reporter of CVE-2016-0751, Daniel Waterworth as the\noriginal reporter of CVE-2015-7576, and Justin Coyne as the original\nreporter of CVE-2015-7577.\n\nAll ror40 collection rubygem-actionpack and rubygem-activerecord packages\nusers are advised to upgrade to these updated packages, which contain\nbackported patches to correct these issues. All running applications using\nthe ror40 collection must be restarted for this update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:0454",
"url": "https://access.redhat.com/errata/RHSA-2016:0454"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1301933",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301933"
},
{
"category": "external",
"summary": "1301946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301946"
},
{
"category": "external",
"summary": "1301957",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301957"
},
{
"category": "external",
"summary": "1301963",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301963"
},
{
"category": "external",
"summary": "1301981",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301981"
},
{
"category": "external",
"summary": "1310043",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310043"
},
{
"category": "external",
"summary": "1310054",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310054"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0454.json"
}
],
"title": "Red Hat Security Advisory: ror40 security update",
"tracking": {
"current_release_date": "2025-11-08T03:45:34+00:00",
"generator": {
"date": "2025-11-08T03:45:34+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2016:0454",
"initial_release_date": "2016-03-15T20:56:17+00:00",
"revision_history": [
{
"date": "2016-03-15T20:56:17+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-03-15T20:56:17+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-08T03:45:34+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Software Collections"
},
{
"branches": [
{
"category": "product_version",
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"product": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"product_id": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activerecord@4.0.2-6.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"product": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"product_id": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activesupport@4.0.2-4.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"product": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"product_id": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-actionpack@4.0.2-7.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"product": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"product_id": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activerecord@4.0.2-6.el6?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"product": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"product_id": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activesupport@4.0.2-4.el6?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"product": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"product_id": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-actionpack@4.0.2-7.el6?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"product": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"product_id": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activerecord@4.0.2-6.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"product": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"product_id": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activerecord-doc@4.0.2-6.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"product": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"product_id": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activesupport@4.0.2-4.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"product": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"product_id": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-actionpack@4.0.2-7.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"product": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"product_id": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-actionpack-doc@4.0.2-7.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"product": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"product_id": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activerecord@4.0.2-6.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"product": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"product_id": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activerecord-doc@4.0.2-6.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"product": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"product_id": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-activesupport@4.0.2-4.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"product": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"product_id": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-actionpack-doc@4.0.2-7.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"product": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"product_id": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ror40-rubygem-actionpack@4.0.2-7.el6?arch=noarch\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch"
},
"product_reference": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch"
},
"product_reference": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch"
},
"product_reference": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch"
},
"product_reference": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch"
},
"product_reference": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch"
},
"product_reference": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch"
},
"product_reference": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch"
},
"product_reference": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch"
},
"product_reference": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch"
},
"product_reference": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch"
},
"product_reference": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch"
},
"product_reference": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch"
},
"product_reference": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch"
},
"product_reference": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src"
},
"product_reference": "ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch"
},
"product_reference": "ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src"
},
"product_reference": "ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch"
},
"product_reference": "ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
},
"product_reference": "ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"Daniel Waterworth"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2015-7576",
"cwe": {
"id": "CWE-385",
"name": "Covert Timing Channel"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301933"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way the Action Controller component compared user names and passwords when performing HTTP basic authentication. Time taken to compare strings could differ depending on input, possibly allowing a remote attacker to determine valid user names and passwords using a timing attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7576"
},
{
"category": "external",
"summary": "RHBZ#1301933",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301933"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7576",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7576"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7576",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7576"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/ANv0HDHEC3k/mt7wNGxbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/ANv0HDHEC3k/mt7wNGxbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-03-15T20:56:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0454"
},
{
"category": "workaround",
"details": "Use following code to monkey-patch http_basic_authenticate_with method in ActionController:\n\n~~~\nmodule ActiveSupport\n module SecurityUtils\n def secure_compare(a, b)\n return false unless a.bytesize == b.bytesize\n\n l = a.unpack \"C#{a.bytesize}\"\n\n res = 0\n b.each_byte { |byte| res |= byte ^ l.shift }\n res == 0\n end\n module_function :secure_compare\n\n def variable_size_secure_compare(a, b)\n secure_compare(::Digest::SHA256.hexdigest(a), ::Digest::SHA256.hexdigest(b))\n end\n module_function :variable_size_secure_compare\n end\nend\n\nmodule ActionController\n class Base\n def self.http_basic_authenticate_with(options = {})\n before_action(options.except(:name, :password, :realm)) do\n authenticate_or_request_with_http_basic(options[:realm] || \"Application\") do |name, password|\n # This comparison uses \u0026 so that it doesn\u0027t short circuit and\n # uses `variable_size_secure_compare` so that length information\n # isn\u0027t leaked.\n ActiveSupport::SecurityUtils.variable_size_secure_compare(name, options[:name]) \u0026\n ActiveSupport::SecurityUtils.variable_size_secure_compare(password, options[:password])\n end\n end\n end\n end\nend\n~~~",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"Justin Coyne"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2015-7577",
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301957"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Active Record component\u0027s handling of nested attributes in combination with the destroy flag. An attacker could possibly use this flaw to set attributes to invalid values or clear all attributes.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-activerecord: Nested attributes rejection proc bypass in Active Record",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7577"
},
{
"category": "external",
"summary": "RHBZ#1301957",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301957"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7577",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7577"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/cawsWcQ6c8g/tegZtYdbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/cawsWcQ6c8g/tegZtYdbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-03-15T20:56:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0454"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-activerecord: Nested attributes rejection proc bypass in Active Record"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
}
],
"cve": "CVE-2015-7581",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301981"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Action Pack component\u0027s caching of controller references. An attacker could use this flaw to cause unbounded memory growth, potentially resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7581"
},
{
"category": "external",
"summary": "RHBZ#1301981",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301981"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7581",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7581"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7581",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7581"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/dthJ5wL69JE/YzPnFelbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/dthJ5wL69JE/YzPnFelbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-03-15T20:56:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0454"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"Aaron Patterson"
],
"organization": "Red Hat",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-0751",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301946"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way the Action Pack component performed MIME type lookups. Since queries were cached in a global cache of MIME types, an attacker could use this flaw to grow the cache indefinitely, potentially resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: possible object leak and denial of service attack in Action Pack",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0751"
},
{
"category": "external",
"summary": "RHBZ#1301946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0751",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0751"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0751",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0751"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/9oLY_FCzvoc/w9oI9XxbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/9oLY_FCzvoc/w9oI9XxbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-03-15T20:56:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0454"
},
{
"category": "workaround",
"details": "Use following code to monkey-patch mime types cache and disable caching.\n\n```\nrequire \u0027action_dispatch/http/mime_type\u0027\n\nMime.const_set :LOOKUP, Hash.new { |h,k|\n Mime::Type.new(k) unless k.blank?\n} \n```\n\nAlternatively perform filtering of mime types in the Accept header to allow only known types.",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-actionpack: possible object leak and denial of service attack in Action Pack"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"John Poulin"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-0752",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301963"
}
],
"notes": [
{
"category": "description",
"text": "A directory traversal flaw was found in the way the Action View component searched for templates for rendering. If an application passed untrusted input to the \u0027render\u0027 method, a remote, unauthenticated attacker could use this flaw to render unexpected files and, possibly, execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: directory traversal flaw in Action View",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0752"
},
{
"category": "external",
"summary": "RHBZ#1301963",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301963"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0752",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0752"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0752",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0752"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/335P1DcLG00/OfB9_LhbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/335P1DcLG00/OfB9_LhbFQAJ"
},
{
"category": "external",
"summary": "https://nvisium.com/blog/2016/01/26/rails-dynamic-render-to-rce-cve-2016-0752/",
"url": "https://nvisium.com/blog/2016/01/26/rails-dynamic-render-to-rce-cve-2016-0752/"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-03-15T20:56:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0454"
},
{
"category": "workaround",
"details": "Avoid passing untrusted input to render method, or verify the input using whitelist before passing it to the render method:\n\n```\n\ndef index\n render verify_template(params[:id])\nend\n\nprivate\ndef verify_template(name)\n # add verification logic particular to your application here\nend\n\n```",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-03-25T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "rubygem-actionpack: directory traversal flaw in Action View"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"Jyoti Singh"
],
"summary": "Acknowledged by upstream."
},
{
"names": [
"Tobias Kraze"
],
"organization": "makandra",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-2097",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2016-02-18T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1310043"
}
],
"notes": [
{
"category": "description",
"text": "A directory traversal flaw was found in the way the Action View component searched for templates for rendering. If an application passed untrusted input to the \u0027render\u0027 method, a remote, unauthenticated attacker could use this flaw to render unexpected files and, possibly, execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: directory traversal in Action View, incomplete CVE-2016-0752 fix",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2097"
},
{
"category": "external",
"summary": "RHBZ#1310043",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310043"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2097",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2097"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2097",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2097"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/ddY6HgqB2z4/we0RasMZIAAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/ddY6HgqB2z4/we0RasMZIAAJ"
}
],
"release_date": "2016-02-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-03-15T20:56:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0454"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "rubygem-actionpack: directory traversal in Action View, incomplete CVE-2016-0752 fix"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"Tobias Kraze"
],
"organization": "makandra",
"summary": "Acknowledged by upstream."
},
{
"names": [
"joernchen"
],
"organization": "Phenoelit",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-2098",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2016-02-18T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1310054"
}
],
"notes": [
{
"category": "description",
"text": "A code injection flaw was found in the way Action View component searched for templates for rendering. If an application passed untrusted input to the \u0027render\u0027 method, a remote, unauthenticated attacker could use this flaw to execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: code injection vulnerability in Action View",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2098"
},
{
"category": "external",
"summary": "RHBZ#1310054",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310054"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2098",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2098"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2098",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2098"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/ly-IH-fxr_Q/WLoOhcMZIAAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/ly-IH-fxr_Q/WLoOhcMZIAAJ"
}
],
"release_date": "2016-02-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-03-15T20:56:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0454"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el6.src",
"6Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.noarch",
"6Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el6.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Server-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Server-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-1:4.0.2-7.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-actionpack-doc-1:4.0.2-7.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-1:4.0.2-6.el7.src",
"7Workstation-RHSCL-2.1:ror40-rubygem-activerecord-doc-1:4.0.2-6.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.noarch",
"7Workstation-RHSCL-2.1:ror40-rubygem-activesupport-1:4.0.2-4.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "rubygem-actionpack: code injection vulnerability in Action View"
}
]
}
rhsa-2016:0296
Vulnerability from csaf_redhat
Published
2016-02-24 10:36
Modified
2025-11-08 03:45
Summary
Red Hat Security Advisory: rh-ror41 security update
Notes
Topic
Updated rh-ror41-rubygem-actionpack, rh-ror41-rubygem-actionview,
rh-ror41-rubygem-activemodel, and rh-ror41-rubygem-activerecord packages
that fix multiple security issues are now available for Red Hat Software
Collections.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
The rh-ror41 collection provides Ruby on Rails version 4.1. Ruby on Rails
is a model-view-controller (MVC) framework for web application development.
The following issue was corrected in rubygem-actionpack and
rubygem-actionview:
A directory traversal flaw was found in the way the Action View component
searched for templates for rendering. If an application passed untrusted
input to the 'render' method, a remote, unauthenticated attacker could use
this to render unexpected files and, possibly, execute arbitrary code.
(CVE-2016-0752)
The following issues were corrected in rubygem-actionpack:
A flaw was found in the way the Action Pack component performed MIME type
lookups. Since queries were cached in a global cache of MIME types, an
attacker could use this flaw to grow the cache indefinitely, potentially
resulting in a denial of service. (CVE-2016-0751)
A flaw was found in the Action Pack component's caching of controller
references. An attacker could use this flaw to cause unbounded memory
growth, potentially resulting in a denial of service. (CVE-2015-7581)
A flaw was found in the way the Action Controller component compared user
names and passwords when performing HTTP basic authentication. Time taken
to compare strings could differ depending on input, possibly allowing a
remote attacker to determine valid user names and passwords using a timing
attack. (CVE-2015-7576)
The following issue was corrected in rubygem-activerecord:
A flaw was found in the Active Record component's handling of nested
attributes in combination with the destroy flag. An attacker could possibly
use this flaw to set attributes to invalid values or clear all attributes.
(CVE-2015-7577)
The following issue was corrected in rubygem-activemodel and
rubygem-activerecord:
A flaw was found in the way the Active Model based models processed
attributes. An attacker with the ability to pass arbitrary attributes to
models could possibly use this flaw to bypass input validation.
(CVE-2016-0753)
Red Hat would like to thank the Ruby on Rails project for reporting these
issues. Upstream acknowledges John Poulin as the original reporter of
CVE-2016-0752, Aaron Patterson of Red Hat as the original reporter of
CVE-2016-0751, Daniel Waterworth as the original reporter of CVE-2015-7576,
Justin Coyne as the original reporter of CVE-2015-7577, and John Backus
from BlockScore as the original reporter of CVE-2016-0753.
All rh-ror41 collection rubygem-actionpack, rubygem-actionview,
rubygem-activemodel, and rubygem-activerecord packages users are advised to
upgrade to these updated packages, which contain backported patches to
correct these issues. All running applications using the rh-ror41
collection must be restarted for this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated rh-ror41-rubygem-actionpack, rh-ror41-rubygem-actionview,\nrh-ror41-rubygem-activemodel, and rh-ror41-rubygem-activerecord packages\nthat fix multiple security issues are now available for Red Hat Software\nCollections.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The rh-ror41 collection provides Ruby on Rails version 4.1. Ruby on Rails\nis a model-view-controller (MVC) framework for web application development.\n\nThe following issue was corrected in rubygem-actionpack and\nrubygem-actionview:\n\nA directory traversal flaw was found in the way the Action View component\nsearched for templates for rendering. If an application passed untrusted\ninput to the \u0027render\u0027 method, a remote, unauthenticated attacker could use\nthis to render unexpected files and, possibly, execute arbitrary code.\n(CVE-2016-0752)\n\nThe following issues were corrected in rubygem-actionpack:\n\nA flaw was found in the way the Action Pack component performed MIME type\nlookups. Since queries were cached in a global cache of MIME types, an\nattacker could use this flaw to grow the cache indefinitely, potentially\nresulting in a denial of service. (CVE-2016-0751)\n\nA flaw was found in the Action Pack component\u0027s caching of controller\nreferences. An attacker could use this flaw to cause unbounded memory\ngrowth, potentially resulting in a denial of service. (CVE-2015-7581)\n\nA flaw was found in the way the Action Controller component compared user\nnames and passwords when performing HTTP basic authentication. Time taken\nto compare strings could differ depending on input, possibly allowing a\nremote attacker to determine valid user names and passwords using a timing\nattack. (CVE-2015-7576)\n\nThe following issue was corrected in rubygem-activerecord:\n\nA flaw was found in the Active Record component\u0027s handling of nested\nattributes in combination with the destroy flag. An attacker could possibly\nuse this flaw to set attributes to invalid values or clear all attributes.\n(CVE-2015-7577)\n\nThe following issue was corrected in rubygem-activemodel and\nrubygem-activerecord:\n\nA flaw was found in the way the Active Model based models processed\nattributes. An attacker with the ability to pass arbitrary attributes to\nmodels could possibly use this flaw to bypass input validation.\n(CVE-2016-0753)\n\nRed Hat would like to thank the Ruby on Rails project for reporting these\nissues. Upstream acknowledges John Poulin as the original reporter of\nCVE-2016-0752, Aaron Patterson of Red Hat as the original reporter of\nCVE-2016-0751, Daniel Waterworth as the original reporter of CVE-2015-7576,\nJustin Coyne as the original reporter of CVE-2015-7577, and John Backus\nfrom BlockScore as the original reporter of CVE-2016-0753.\n\nAll rh-ror41 collection rubygem-actionpack, rubygem-actionview,\nrubygem-activemodel, and rubygem-activerecord packages users are advised to\nupgrade to these updated packages, which contain backported patches to\ncorrect these issues. All running applications using the rh-ror41\ncollection must be restarted for this update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:0296",
"url": "https://access.redhat.com/errata/RHSA-2016:0296"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1301933",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301933"
},
{
"category": "external",
"summary": "1301946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301946"
},
{
"category": "external",
"summary": "1301957",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301957"
},
{
"category": "external",
"summary": "1301963",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301963"
},
{
"category": "external",
"summary": "1301973",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301973"
},
{
"category": "external",
"summary": "1301981",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301981"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0296.json"
}
],
"title": "Red Hat Security Advisory: rh-ror41 security update",
"tracking": {
"current_release_date": "2025-11-08T03:45:33+00:00",
"generator": {
"date": "2025-11-08T03:45:33+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2016:0296",
"initial_release_date": "2016-02-24T10:36:00+00:00",
"revision_history": [
{
"date": "2016-02-24T10:36:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-02-24T10:36:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-08T03:45:33+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Software Collections"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"product_id": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionview-doc@4.1.5-4.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"product_id": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionview@4.1.5-4.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"product_id": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activemodel@4.1.5-2.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"product_id": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activemodel-doc@4.1.5-2.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"product_id": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionpack-doc@4.1.5-3.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"product_id": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionpack@4.1.5-3.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"product_id": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activerecord@4.1.5-2.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"product_id": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activerecord-doc@4.1.5-2.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"product": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"product_id": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activesupport@4.1.5-3.el7?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"product_id": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionview@4.1.5-4.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"product_id": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionview-doc@4.1.5-4.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"product_id": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activemodel-doc@4.1.5-2.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"product_id": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activemodel@4.1.5-2.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"product_id": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionpack-doc@4.1.5-3.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"product_id": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionpack@4.1.5-3.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"product_id": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activerecord@4.1.5-2.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"product_id": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activerecord-doc@4.1.5-2.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"product": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"product_id": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activesupport@4.1.5-3.el6?arch=noarch\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"product": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"product_id": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionview@4.1.5-4.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"product": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"product_id": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activemodel@4.1.5-2.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"product": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"product_id": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionpack@4.1.5-3.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"product": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"product_id": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activerecord@4.1.5-2.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"product": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"product_id": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activesupport@4.1.5-3.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"product": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"product_id": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionview@4.1.5-4.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"product": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"product_id": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activemodel@4.1.5-2.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"product": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"product_id": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-actionpack@4.1.5-3.el6?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"product": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"product_id": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activerecord@4.1.5-2.el6?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"product": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"product_id": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-ror41-rubygem-activesupport@4.1.5-3.el6?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)",
"product_id": "7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)",
"product_id": "7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src"
},
"product_reference": "rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src"
},
"product_reference": "rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src"
},
"product_reference": "rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src"
},
"product_reference": "rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
},
"product_reference": "rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.1"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"Daniel Waterworth"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2015-7576",
"cwe": {
"id": "CWE-385",
"name": "Covert Timing Channel"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301933"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way the Action Controller component compared user names and passwords when performing HTTP basic authentication. Time taken to compare strings could differ depending on input, possibly allowing a remote attacker to determine valid user names and passwords using a timing attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7576"
},
{
"category": "external",
"summary": "RHBZ#1301933",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301933"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7576",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7576"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7576",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7576"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/ANv0HDHEC3k/mt7wNGxbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/ANv0HDHEC3k/mt7wNGxbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-24T10:36:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0296"
},
{
"category": "workaround",
"details": "Use following code to monkey-patch http_basic_authenticate_with method in ActionController:\n\n~~~\nmodule ActiveSupport\n module SecurityUtils\n def secure_compare(a, b)\n return false unless a.bytesize == b.bytesize\n\n l = a.unpack \"C#{a.bytesize}\"\n\n res = 0\n b.each_byte { |byte| res |= byte ^ l.shift }\n res == 0\n end\n module_function :secure_compare\n\n def variable_size_secure_compare(a, b)\n secure_compare(::Digest::SHA256.hexdigest(a), ::Digest::SHA256.hexdigest(b))\n end\n module_function :variable_size_secure_compare\n end\nend\n\nmodule ActionController\n class Base\n def self.http_basic_authenticate_with(options = {})\n before_action(options.except(:name, :password, :realm)) do\n authenticate_or_request_with_http_basic(options[:realm] || \"Application\") do |name, password|\n # This comparison uses \u0026 so that it doesn\u0027t short circuit and\n # uses `variable_size_secure_compare` so that length information\n # isn\u0027t leaked.\n ActiveSupport::SecurityUtils.variable_size_secure_compare(name, options[:name]) \u0026\n ActiveSupport::SecurityUtils.variable_size_secure_compare(password, options[:password])\n end\n end\n end\n end\nend\n~~~",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"Justin Coyne"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2015-7577",
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301957"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Active Record component\u0027s handling of nested attributes in combination with the destroy flag. An attacker could possibly use this flaw to set attributes to invalid values or clear all attributes.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-activerecord: Nested attributes rejection proc bypass in Active Record",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7577"
},
{
"category": "external",
"summary": "RHBZ#1301957",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301957"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7577",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7577"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/cawsWcQ6c8g/tegZtYdbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/cawsWcQ6c8g/tegZtYdbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-24T10:36:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0296"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-activerecord: Nested attributes rejection proc bypass in Active Record"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
}
],
"cve": "CVE-2015-7581",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301981"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Action Pack component\u0027s caching of controller references. An attacker could use this flaw to cause unbounded memory growth, potentially resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7581"
},
{
"category": "external",
"summary": "RHBZ#1301981",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301981"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7581",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7581"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7581",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7581"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/dthJ5wL69JE/YzPnFelbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/dthJ5wL69JE/YzPnFelbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-24T10:36:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0296"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"Aaron Patterson"
],
"organization": "Red Hat",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-0751",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301946"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way the Action Pack component performed MIME type lookups. Since queries were cached in a global cache of MIME types, an attacker could use this flaw to grow the cache indefinitely, potentially resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: possible object leak and denial of service attack in Action Pack",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0751"
},
{
"category": "external",
"summary": "RHBZ#1301946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0751",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0751"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0751",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0751"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/9oLY_FCzvoc/w9oI9XxbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/9oLY_FCzvoc/w9oI9XxbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-24T10:36:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0296"
},
{
"category": "workaround",
"details": "Use following code to monkey-patch mime types cache and disable caching.\n\n```\nrequire \u0027action_dispatch/http/mime_type\u0027\n\nMime.const_set :LOOKUP, Hash.new { |h,k|\n Mime::Type.new(k) unless k.blank?\n} \n```\n\nAlternatively perform filtering of mime types in the Accept header to allow only known types.",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-actionpack: possible object leak and denial of service attack in Action Pack"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"John Poulin"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-0752",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301963"
}
],
"notes": [
{
"category": "description",
"text": "A directory traversal flaw was found in the way the Action View component searched for templates for rendering. If an application passed untrusted input to the \u0027render\u0027 method, a remote, unauthenticated attacker could use this flaw to render unexpected files and, possibly, execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-actionpack: directory traversal flaw in Action View",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0752"
},
{
"category": "external",
"summary": "RHBZ#1301963",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301963"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0752",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0752"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0752",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0752"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/335P1DcLG00/OfB9_LhbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/335P1DcLG00/OfB9_LhbFQAJ"
},
{
"category": "external",
"summary": "https://nvisium.com/blog/2016/01/26/rails-dynamic-render-to-rce-cve-2016-0752/",
"url": "https://nvisium.com/blog/2016/01/26/rails-dynamic-render-to-rce-cve-2016-0752/"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-24T10:36:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0296"
},
{
"category": "workaround",
"details": "Avoid passing untrusted input to render method, or verify the input using whitelist before passing it to the render method:\n\n```\n\ndef index\n render verify_template(params[:id])\nend\n\nprivate\ndef verify_template(name)\n # add verification logic particular to your application here\nend\n\n```",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-03-25T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "rubygem-actionpack: directory traversal flaw in Action View"
},
{
"acknowledgments": [
{
"names": [
"the Ruby on Rails project"
]
},
{
"names": [
"John Backus"
],
"organization": "BlockScore",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-0753",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2016-01-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1301973"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way the Active Model based models processed attributes. An attacker with the ability to pass arbitrary attributes to models could possibly use this flaw to bypass input validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-activerecord: possible input validation circumvention in Active Model",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0753"
},
{
"category": "external",
"summary": "RHBZ#1301973",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301973"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0753",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0753"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0753",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0753"
},
{
"category": "external",
"summary": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"url": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!msg/rubyonrails-security/6jQVC1geukQ/8oYETcxbFQAJ",
"url": "https://groups.google.com/forum/#!msg/rubyonrails-security/6jQVC1geukQ/8oYETcxbFQAJ"
}
],
"release_date": "2016-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-02-24T10:36:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0296"
},
{
"category": "workaround",
"details": "Do not allow arbitrary attributes to be passed to models. In Rails with Strong Parameters, make sure to not call permit! method, which bypasses strong parameters protections. Outside of rails, use whitelisting to filter only allowed attributes before passing them to models.",
"product_ids": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.6.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1-6.7.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el6.src",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.noarch",
"6Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el6.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.1.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1-7.2.Z:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Server-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-1:4.1.5-3.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionpack-doc-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-0:4.1.5-4.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-actionview-doc-0:4.1.5-4.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-0:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activemodel-doc-0:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-1:4.1.5-2.el7.src",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activerecord-doc-1:4.1.5-2.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.noarch",
"7Workstation-RHSCL-2.1:rh-ror41-rubygem-activesupport-1:4.1.5-3.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-activerecord: possible input validation circumvention in Active Model"
}
]
}
CERTFR-2016-AVI-037
Vulnerability from certfr_avis
De multiples vulnérabilités ont été corrigées dans Ruby On Rails. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, un contournement de la politique de sécurité et une atteinte à l'intégrité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Ruby on Rails | Ruby on Rails | Ruby on Rails versions 4.1.x antérieures à 4.1.14.1 | ||
| Ruby on Rails | Ruby on Rails | Ruby on Rails versions 4.2.x antérieures à 4.2.5.1 | ||
| Ruby on Rails | Ruby on Rails | Ruby on Rails versions 5.0.x antérieures à 5.0.0.beta1.1 | ||
| Ruby on Rails | Ruby on Rails | Ruby on Rails versions 3.2.x antérieures à 3.2.22.1 |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Ruby on Rails versions 4.1.x ant\u00e9rieures \u00e0 4.1.14.1",
"product": {
"name": "Ruby on Rails",
"vendor": {
"name": "Ruby on Rails",
"scada": false
}
}
},
{
"description": "Ruby on Rails versions 4.2.x ant\u00e9rieures \u00e0 4.2.5.1",
"product": {
"name": "Ruby on Rails",
"vendor": {
"name": "Ruby on Rails",
"scada": false
}
}
},
{
"description": "Ruby on Rails versions 5.0.x ant\u00e9rieures \u00e0 5.0.0.beta1.1",
"product": {
"name": "Ruby on Rails",
"vendor": {
"name": "Ruby on Rails",
"scada": false
}
}
},
{
"description": "Ruby on Rails versions 3.2.x ant\u00e9rieures \u00e0 3.2.22.1",
"product": {
"name": "Ruby on Rails",
"vendor": {
"name": "Ruby on Rails",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2016-0752",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0752"
},
{
"name": "CVE-2016-0753",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0753"
},
{
"name": "CVE-2015-7578",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7578"
},
{
"name": "CVE-2015-7581",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7581"
},
{
"name": "CVE-2015-7579",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7579"
},
{
"name": "CVE-2016-0751",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0751"
},
{
"name": "CVE-2015-7576",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7576"
},
{
"name": "CVE-2015-7577",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7577"
}
],
"initial_release_date": "2016-01-26T00:00:00",
"last_revision_date": "2016-01-26T00:00:00",
"links": [
{
"title": "Ruby On Rails groups.google.com",
"url": "https://groups.google.com/forum/?_escaped_fragment_=forum/rubyonrails-security#!forum/rubyonrails-security"
}
],
"reference": "CERTFR-2016-AVI-037",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2016-01-26T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Injection de code indirecte \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eRuby On Rails\u003c/span\u003e. Certaines d\u0027entre elles permettent\n\u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, un\ncontournement de la politique de s\u00e9curit\u00e9 et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9\ndes donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Ruby On Rails",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Ruby On Rails du 25 janvier 2016",
"url": "http://weblog.rubyonrails.org/"
}
]
}
suse-su-2016:1146-1
Vulnerability from csaf_suse
Published
2016-04-25 14:28
Modified
2016-04-25 14:28
Summary
Security update for portus
Notes
Title of the patch
Security update for portus
Description of the patch
Portus was updated to version 2.0.3, which brings several fixes and enhancements:
- Fixed crono job when a repository could not be found.
- Fixed compatibility issues with Docker 1.10 and Distribution 2.3.
- Handle multiple scopes in token requests.
- Add optional fields to token response.
- Fixed notification events for Distribution v2.3.
- Paginate through the catalog properly.
- Do not remove all the repositories if fetching one fails.
- Fixed SMTP setup.
- Don't let crono overflow the 'log' column on the DB.
- Show the actual LDAP error on invalid login.
- Fixed the location of crono logs.
- Always use relative paths.
- Set RUBYLIB when using portusctl.
- Don't count hidden teams on the admin panel.
- Warn developers on unsupported docker-compose versions.
- Directly invalidate LDAP logins without name and password.
- Don't show the 'I forgot my password' link on LDAP.
The following Rubygems bundled within Portus have been updated to fix security
issues:
- CVE-2016-2098: rubygem-actionpack (bsc#969943).
- CVE-2015-7578: rails-html-sanitizer (bsc#963326).
- CVE-2015-7579: rails-html-sanitizer (bsc#963327).
- CVE-2015-7580: rails-html-sanitizer (bsc#963328).
- CVE-2015-7576: rubygem-actionpack, rubygem-activesupport (bsc#963563).
- CVE-2015-7577: rubygem-activerecord (bsc#963604).
- CVE-2016-0751: rugygem-actionpack (bsc#963627).
- CVE-2016-0752: rubygem-actionpack, rubygem-actionview (bsc#963608).
- CVE-2016-0753: rubygem-activemodel, rubygem-activesupport, rubygem-activerecord (bsc#963617).
- CVE-2015-7581: rubygem-actionpack (bsc#963625).
Patchnames
SUSE-SLE-Module-Containers-12-2016-672
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for portus",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nPortus was updated to version 2.0.3, which brings several fixes and enhancements:\n\n- Fixed crono job when a repository could not be found.\n- Fixed compatibility issues with Docker 1.10 and Distribution 2.3.\n- Handle multiple scopes in token requests.\n- Add optional fields to token response.\n- Fixed notification events for Distribution v2.3.\n- Paginate through the catalog properly.\n- Do not remove all the repositories if fetching one fails.\n- Fixed SMTP setup.\n- Don\u0027t let crono overflow the \u0027log\u0027 column on the DB.\n- Show the actual LDAP error on invalid login.\n- Fixed the location of crono logs.\n- Always use relative paths.\n- Set RUBYLIB when using portusctl.\n- Don\u0027t count hidden teams on the admin panel.\n- Warn developers on unsupported docker-compose versions.\n- Directly invalidate LDAP logins without name and password.\n- Don\u0027t show the \u0027I forgot my password\u0027 link on LDAP.\n\nThe following Rubygems bundled within Portus have been updated to fix security\nissues:\n\n- CVE-2016-2098: rubygem-actionpack (bsc#969943).\n- CVE-2015-7578: rails-html-sanitizer (bsc#963326).\n- CVE-2015-7579: rails-html-sanitizer (bsc#963327).\n- CVE-2015-7580: rails-html-sanitizer (bsc#963328).\n- CVE-2015-7576: rubygem-actionpack, rubygem-activesupport (bsc#963563).\n- CVE-2015-7577: rubygem-activerecord (bsc#963604).\n- CVE-2016-0751: rugygem-actionpack (bsc#963627).\n- CVE-2016-0752: rubygem-actionpack, rubygem-actionview (bsc#963608).\n- CVE-2016-0753: rubygem-activemodel, rubygem-activesupport, rubygem-activerecord (bsc#963617).\n- CVE-2015-7581: rubygem-actionpack (bsc#963625).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Module-Containers-12-2016-672",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_1146-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:1146-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20161146-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:1146-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-April/002027.html"
},
{
"category": "self",
"summary": "SUSE Bug 963326",
"url": "https://bugzilla.suse.com/963326"
},
{
"category": "self",
"summary": "SUSE Bug 963327",
"url": "https://bugzilla.suse.com/963327"
},
{
"category": "self",
"summary": "SUSE Bug 963328",
"url": "https://bugzilla.suse.com/963328"
},
{
"category": "self",
"summary": "SUSE Bug 963563",
"url": "https://bugzilla.suse.com/963563"
},
{
"category": "self",
"summary": "SUSE Bug 963604",
"url": "https://bugzilla.suse.com/963604"
},
{
"category": "self",
"summary": "SUSE Bug 963608",
"url": "https://bugzilla.suse.com/963608"
},
{
"category": "self",
"summary": "SUSE Bug 963617",
"url": "https://bugzilla.suse.com/963617"
},
{
"category": "self",
"summary": "SUSE Bug 963625",
"url": "https://bugzilla.suse.com/963625"
},
{
"category": "self",
"summary": "SUSE Bug 963627",
"url": "https://bugzilla.suse.com/963627"
},
{
"category": "self",
"summary": "SUSE Bug 969943",
"url": "https://bugzilla.suse.com/969943"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7576 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7576/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7577 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7577/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7578 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7578/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7579 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7579/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7580 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7580/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7581 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7581/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0751 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0751/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0752 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0752/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0753 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0753/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2098 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2098/"
}
],
"title": "Security update for portus",
"tracking": {
"current_release_date": "2016-04-25T14:28:51Z",
"generator": {
"date": "2016-04-25T14:28:51Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:1146-1",
"initial_release_date": "2016-04-25T14:28:51Z",
"revision_history": [
{
"date": "2016-04-25T14:28:51Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "portus-2.0.3-2.4.x86_64",
"product": {
"name": "portus-2.0.3-2.4.x86_64",
"product_id": "portus-2.0.3-2.4.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Containers 12",
"product": {
"name": "SUSE Linux Enterprise Module for Containers 12",
"product_id": "SUSE Linux Enterprise Module for Containers 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-containers:12"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "portus-2.0.3-2.4.x86_64 as component of SUSE Linux Enterprise Module for Containers 12",
"product_id": "SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
},
"product_reference": "portus-2.0.3-2.4.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-7576",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7576"
}
],
"notes": [
{
"category": "general",
"text": "The http_basic_authenticate_with method in actionpack/lib/action_controller/metal/http_authentication.rb in the Basic Authentication implementation in Action Controller in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not use a constant-time algorithm for verifying credentials, which makes it easier for remote attackers to bypass authentication by measuring timing differences.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7576",
"url": "https://www.suse.com/security/cve/CVE-2015-7576"
},
{
"category": "external",
"summary": "SUSE Bug 963329 for CVE-2015-7576",
"url": "https://bugzilla.suse.com/963329"
},
{
"category": "external",
"summary": "SUSE Bug 963563 for CVE-2015-7576",
"url": "https://bugzilla.suse.com/963563"
},
{
"category": "external",
"summary": "SUSE Bug 970715 for CVE-2015-7576",
"url": "https://bugzilla.suse.com/970715"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-25T14:28:51Z",
"details": "moderate"
}
],
"title": "CVE-2015-7576"
},
{
"cve": "CVE-2015-7577",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7577"
}
],
"notes": [
{
"category": "general",
"text": "activerecord/lib/active_record/nested_attributes.rb in Active Record in Ruby on Rails 3.1.x and 3.2.x before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly implement a certain destroy option, which allows remote attackers to bypass intended change restrictions by leveraging use of the nested attributes feature.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7577",
"url": "https://www.suse.com/security/cve/CVE-2015-7577"
},
{
"category": "external",
"summary": "SUSE Bug 963330 for CVE-2015-7577",
"url": "https://bugzilla.suse.com/963330"
},
{
"category": "external",
"summary": "SUSE Bug 963604 for CVE-2015-7577",
"url": "https://bugzilla.suse.com/963604"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-25T14:28:51Z",
"details": "moderate"
}
],
"title": "CVE-2015-7577"
},
{
"cve": "CVE-2015-7578",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7578"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting (XSS) vulnerability in the rails-html-sanitizer gem before 1.0.3 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inject arbitrary web script or HTML via crafted tag attributes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7578",
"url": "https://www.suse.com/security/cve/CVE-2015-7578"
},
{
"category": "external",
"summary": "SUSE Bug 963326 for CVE-2015-7578",
"url": "https://bugzilla.suse.com/963326"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-25T14:28:51Z",
"details": "moderate"
}
],
"title": "CVE-2015-7578"
},
{
"cve": "CVE-2015-7579",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7579"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting (XSS) vulnerability in the rails-html-sanitizer gem 1.0.2 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inject arbitrary web script or HTML via an HTML entity that is mishandled by the Rails::Html::FullSanitizer class.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7579",
"url": "https://www.suse.com/security/cve/CVE-2015-7579"
},
{
"category": "external",
"summary": "SUSE Bug 963326 for CVE-2015-7579",
"url": "https://bugzilla.suse.com/963326"
},
{
"category": "external",
"summary": "SUSE Bug 963327 for CVE-2015-7579",
"url": "https://bugzilla.suse.com/963327"
},
{
"category": "external",
"summary": "SUSE Bug 963328 for CVE-2015-7579",
"url": "https://bugzilla.suse.com/963328"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-25T14:28:51Z",
"details": "moderate"
}
],
"title": "CVE-2015-7579"
},
{
"cve": "CVE-2015-7580",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7580"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting (XSS) vulnerability in lib/rails/html/scrubbers.rb in the rails-html-sanitizer gem before 1.0.3 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inject arbitrary web script or HTML via a crafted CDATA node.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7580",
"url": "https://www.suse.com/security/cve/CVE-2015-7580"
},
{
"category": "external",
"summary": "SUSE Bug 963326 for CVE-2015-7580",
"url": "https://bugzilla.suse.com/963326"
},
{
"category": "external",
"summary": "SUSE Bug 963327 for CVE-2015-7580",
"url": "https://bugzilla.suse.com/963327"
},
{
"category": "external",
"summary": "SUSE Bug 963328 for CVE-2015-7580",
"url": "https://bugzilla.suse.com/963328"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-25T14:28:51Z",
"details": "moderate"
}
],
"title": "CVE-2015-7580"
},
{
"cve": "CVE-2015-7581",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7581"
}
],
"notes": [
{
"category": "general",
"text": "actionpack/lib/action_dispatch/routing/route_set.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service (superfluous caching and memory consumption) by leveraging an application\u0027s use of a wildcard controller route.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7581",
"url": "https://www.suse.com/security/cve/CVE-2015-7581"
},
{
"category": "external",
"summary": "SUSE Bug 963335 for CVE-2015-7581",
"url": "https://bugzilla.suse.com/963335"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-25T14:28:51Z",
"details": "moderate"
}
],
"title": "CVE-2015-7581"
},
{
"cve": "CVE-2016-0751",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0751"
}
],
"notes": [
{
"category": "general",
"text": "actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP Accept header.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0751",
"url": "https://www.suse.com/security/cve/CVE-2016-0751"
},
{
"category": "external",
"summary": "SUSE Bug 963331 for CVE-2016-0751",
"url": "https://bugzilla.suse.com/963331"
},
{
"category": "external",
"summary": "SUSE Bug 963627 for CVE-2016-0751",
"url": "https://bugzilla.suse.com/963627"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-25T14:28:51Z",
"details": "moderate"
}
],
"title": "CVE-2016-0751"
},
{
"cve": "CVE-2016-0752",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0752"
}
],
"notes": [
{
"category": "general",
"text": "Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application\u0027s unrestricted use of the render method and providing a .. (dot dot) in a pathname.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0752",
"url": "https://www.suse.com/security/cve/CVE-2016-0752"
},
{
"category": "external",
"summary": "SUSE Bug 963332 for CVE-2016-0752",
"url": "https://bugzilla.suse.com/963332"
},
{
"category": "external",
"summary": "SUSE Bug 963608 for CVE-2016-0752",
"url": "https://bugzilla.suse.com/963608"
},
{
"category": "external",
"summary": "SUSE Bug 968850 for CVE-2016-0752",
"url": "https://bugzilla.suse.com/968850"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-25T14:28:51Z",
"details": "moderate"
}
],
"title": "CVE-2016-0752"
},
{
"cve": "CVE-2016-0753",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0753"
}
],
"notes": [
{
"category": "general",
"text": "Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers to bypass intended validation steps via crafted parameters.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0753",
"url": "https://www.suse.com/security/cve/CVE-2016-0753"
},
{
"category": "external",
"summary": "SUSE Bug 963334 for CVE-2016-0753",
"url": "https://bugzilla.suse.com/963334"
},
{
"category": "external",
"summary": "SUSE Bug 963617 for CVE-2016-0753",
"url": "https://bugzilla.suse.com/963617"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-25T14:28:51Z",
"details": "moderate"
}
],
"title": "CVE-2016-0753"
},
{
"cve": "CVE-2016-2098",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2098"
}
],
"notes": [
{
"category": "general",
"text": "Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application\u0027s unrestricted use of the render method.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2098",
"url": "https://www.suse.com/security/cve/CVE-2016-2098"
},
{
"category": "external",
"summary": "SUSE Bug 968849 for CVE-2016-2098",
"url": "https://bugzilla.suse.com/968849"
},
{
"category": "external",
"summary": "SUSE Bug 969943 for CVE-2016-2098",
"url": "https://bugzilla.suse.com/969943"
},
{
"category": "external",
"summary": "SUSE Bug 993313 for CVE-2016-2098",
"url": "https://bugzilla.suse.com/993313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Containers 12:portus-2.0.3-2.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-25T14:28:51Z",
"details": "important"
}
],
"title": "CVE-2016-2098"
}
]
}
suse-su-2016:0858-1
Vulnerability from csaf_suse
Published
2016-03-22 16:21
Modified
2016-03-22 16:21
Summary
Security update for rubygem-actionpack-4_1
Notes
Title of the patch
Security update for rubygem-actionpack-4_1
Description of the patch
This update for rubygem-actionpack-4_1 fixes the following issues:
- CVE-2016-0751: Object Leak DoS (bsc#963331)
- CVE-2015-7581: unbounded memory growth DoS via wildcard controller routes (bsc#963335)
- CVE-2016-0752: directory traversal and information leak in Action View (bsc#963332)
- CVE-2015-7576: Timing attack vulnerability in basic authentication in Action Controller (bsc#963329)
Patchnames
sleclo50sp3-rubygem-actionpack-4_1-12468
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for rubygem-actionpack-4_1",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for rubygem-actionpack-4_1 fixes the following issues:\n\n- CVE-2016-0751: Object Leak DoS (bsc#963331)\n- CVE-2015-7581: unbounded memory growth DoS via wildcard controller routes (bsc#963335) \n- CVE-2016-0752: directory traversal and information leak in Action View (bsc#963332) \n- CVE-2015-7576: Timing attack vulnerability in basic authentication in Action Controller (bsc#963329)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "sleclo50sp3-rubygem-actionpack-4_1-12468",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_0858-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:0858-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160858-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:0858-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-March/001964.html"
},
{
"category": "self",
"summary": "SUSE Bug 963329",
"url": "https://bugzilla.suse.com/963329"
},
{
"category": "self",
"summary": "SUSE Bug 963331",
"url": "https://bugzilla.suse.com/963331"
},
{
"category": "self",
"summary": "SUSE Bug 963332",
"url": "https://bugzilla.suse.com/963332"
},
{
"category": "self",
"summary": "SUSE Bug 963335",
"url": "https://bugzilla.suse.com/963335"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7576 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7576/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7581 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7581/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0751 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0751/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0752 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0752/"
}
],
"title": "Security update for rubygem-actionpack-4_1",
"tracking": {
"current_release_date": "2016-03-22T16:21:44Z",
"generator": {
"date": "2016-03-22T16:21:44Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:0858-1",
"initial_release_date": "2016-03-22T16:21:44Z",
"revision_history": [
{
"date": "2016-03-22T16:21:44Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ruby2.1-rubygem-actionpack-4_1-4.1.9-9.1.x86_64",
"product": {
"name": "ruby2.1-rubygem-actionpack-4_1-4.1.9-9.1.x86_64",
"product_id": "ruby2.1-rubygem-actionpack-4_1-4.1.9-9.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE OpenStack Cloud 5",
"product": {
"name": "SUSE OpenStack Cloud 5",
"product_id": "SUSE OpenStack Cloud 5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:cloud:5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.1-rubygem-actionpack-4_1-4.1.9-9.1.x86_64 as component of SUSE OpenStack Cloud 5",
"product_id": "SUSE OpenStack Cloud 5:ruby2.1-rubygem-actionpack-4_1-4.1.9-9.1.x86_64"
},
"product_reference": "ruby2.1-rubygem-actionpack-4_1-4.1.9-9.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-7576",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7576"
}
],
"notes": [
{
"category": "general",
"text": "The http_basic_authenticate_with method in actionpack/lib/action_controller/metal/http_authentication.rb in the Basic Authentication implementation in Action Controller in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not use a constant-time algorithm for verifying credentials, which makes it easier for remote attackers to bypass authentication by measuring timing differences.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE OpenStack Cloud 5:ruby2.1-rubygem-actionpack-4_1-4.1.9-9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7576",
"url": "https://www.suse.com/security/cve/CVE-2015-7576"
},
{
"category": "external",
"summary": "SUSE Bug 963329 for CVE-2015-7576",
"url": "https://bugzilla.suse.com/963329"
},
{
"category": "external",
"summary": "SUSE Bug 963563 for CVE-2015-7576",
"url": "https://bugzilla.suse.com/963563"
},
{
"category": "external",
"summary": "SUSE Bug 970715 for CVE-2015-7576",
"url": "https://bugzilla.suse.com/970715"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE OpenStack Cloud 5:ruby2.1-rubygem-actionpack-4_1-4.1.9-9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE OpenStack Cloud 5:ruby2.1-rubygem-actionpack-4_1-4.1.9-9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-22T16:21:44Z",
"details": "moderate"
}
],
"title": "CVE-2015-7576"
},
{
"cve": "CVE-2015-7581",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7581"
}
],
"notes": [
{
"category": "general",
"text": "actionpack/lib/action_dispatch/routing/route_set.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service (superfluous caching and memory consumption) by leveraging an application\u0027s use of a wildcard controller route.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE OpenStack Cloud 5:ruby2.1-rubygem-actionpack-4_1-4.1.9-9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7581",
"url": "https://www.suse.com/security/cve/CVE-2015-7581"
},
{
"category": "external",
"summary": "SUSE Bug 963335 for CVE-2015-7581",
"url": "https://bugzilla.suse.com/963335"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE OpenStack Cloud 5:ruby2.1-rubygem-actionpack-4_1-4.1.9-9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE OpenStack Cloud 5:ruby2.1-rubygem-actionpack-4_1-4.1.9-9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-22T16:21:44Z",
"details": "moderate"
}
],
"title": "CVE-2015-7581"
},
{
"cve": "CVE-2016-0751",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0751"
}
],
"notes": [
{
"category": "general",
"text": "actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP Accept header.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE OpenStack Cloud 5:ruby2.1-rubygem-actionpack-4_1-4.1.9-9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0751",
"url": "https://www.suse.com/security/cve/CVE-2016-0751"
},
{
"category": "external",
"summary": "SUSE Bug 963331 for CVE-2016-0751",
"url": "https://bugzilla.suse.com/963331"
},
{
"category": "external",
"summary": "SUSE Bug 963627 for CVE-2016-0751",
"url": "https://bugzilla.suse.com/963627"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE OpenStack Cloud 5:ruby2.1-rubygem-actionpack-4_1-4.1.9-9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE OpenStack Cloud 5:ruby2.1-rubygem-actionpack-4_1-4.1.9-9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-22T16:21:44Z",
"details": "moderate"
}
],
"title": "CVE-2016-0751"
},
{
"cve": "CVE-2016-0752",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0752"
}
],
"notes": [
{
"category": "general",
"text": "Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application\u0027s unrestricted use of the render method and providing a .. (dot dot) in a pathname.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE OpenStack Cloud 5:ruby2.1-rubygem-actionpack-4_1-4.1.9-9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0752",
"url": "https://www.suse.com/security/cve/CVE-2016-0752"
},
{
"category": "external",
"summary": "SUSE Bug 963332 for CVE-2016-0752",
"url": "https://bugzilla.suse.com/963332"
},
{
"category": "external",
"summary": "SUSE Bug 963608 for CVE-2016-0752",
"url": "https://bugzilla.suse.com/963608"
},
{
"category": "external",
"summary": "SUSE Bug 968850 for CVE-2016-0752",
"url": "https://bugzilla.suse.com/968850"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE OpenStack Cloud 5:ruby2.1-rubygem-actionpack-4_1-4.1.9-9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE OpenStack Cloud 5:ruby2.1-rubygem-actionpack-4_1-4.1.9-9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-22T16:21:44Z",
"details": "moderate"
}
],
"title": "CVE-2016-0752"
}
]
}
suse-su-2016:0457-1
Vulnerability from csaf_suse
Published
2016-02-15 13:25
Modified
2016-02-15 13:25
Summary
Security update for rubygem-actionpack-4_2
Notes
Title of the patch
Security update for rubygem-actionpack-4_2
Description of the patch
This update for rubygem-actionpack-4_2 fixes the following issues:
- CVE-2016-0751: Object Leak DoS (bsc#963331)
- CVE-2015-7581: unbounded memory growth DoS via wildcard controller routes (bsc#963335)
- CVE-2016-0752: directory traversal and information leak in Action View (bsc#963332)
- CVE-2015-7576: Timing attack vulnerability in basic authentication in Action Controller (bsc#963329)
Patchnames
SUSE-Storage-2.1-2016-262
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for rubygem-actionpack-4_2",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for rubygem-actionpack-4_2 fixes the following issues:\n\n- CVE-2016-0751: Object Leak DoS (bsc#963331)\n- CVE-2015-7581: unbounded memory growth DoS via wildcard controller routes (bsc#963335) \n- CVE-2016-0752: directory traversal and information leak in Action View (bsc#963332) \n- CVE-2015-7576: Timing attack vulnerability in basic authentication in Action Controller (bsc#963329)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-Storage-2.1-2016-262",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_0457-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:0457-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160457-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:0457-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-February/001879.html"
},
{
"category": "self",
"summary": "SUSE Bug 963329",
"url": "https://bugzilla.suse.com/963329"
},
{
"category": "self",
"summary": "SUSE Bug 963331",
"url": "https://bugzilla.suse.com/963331"
},
{
"category": "self",
"summary": "SUSE Bug 963332",
"url": "https://bugzilla.suse.com/963332"
},
{
"category": "self",
"summary": "SUSE Bug 963335",
"url": "https://bugzilla.suse.com/963335"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7576 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7576/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7581 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7581/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0751 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0751/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0752 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0752/"
}
],
"title": "Security update for rubygem-actionpack-4_2",
"tracking": {
"current_release_date": "2016-02-15T13:25:35Z",
"generator": {
"date": "2016-02-15T13:25:35Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:0457-1",
"initial_release_date": "2016-02-15T13:25:35Z",
"revision_history": [
{
"date": "2016-02-15T13:25:35Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ruby2.1-rubygem-actionpack-4_2-4.2.2-6.1.x86_64",
"product": {
"name": "ruby2.1-rubygem-actionpack-4_2-4.2.2-6.1.x86_64",
"product_id": "ruby2.1-rubygem-actionpack-4_2-4.2.2-6.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Enterprise Storage 2.1",
"product": {
"name": "SUSE Enterprise Storage 2.1",
"product_id": "SUSE Enterprise Storage 2.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:2.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.1-rubygem-actionpack-4_2-4.2.2-6.1.x86_64 as component of SUSE Enterprise Storage 2.1",
"product_id": "SUSE Enterprise Storage 2.1:ruby2.1-rubygem-actionpack-4_2-4.2.2-6.1.x86_64"
},
"product_reference": "ruby2.1-rubygem-actionpack-4_2-4.2.2-6.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 2.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-7576",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7576"
}
],
"notes": [
{
"category": "general",
"text": "The http_basic_authenticate_with method in actionpack/lib/action_controller/metal/http_authentication.rb in the Basic Authentication implementation in Action Controller in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not use a constant-time algorithm for verifying credentials, which makes it easier for remote attackers to bypass authentication by measuring timing differences.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 2.1:ruby2.1-rubygem-actionpack-4_2-4.2.2-6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7576",
"url": "https://www.suse.com/security/cve/CVE-2015-7576"
},
{
"category": "external",
"summary": "SUSE Bug 963329 for CVE-2015-7576",
"url": "https://bugzilla.suse.com/963329"
},
{
"category": "external",
"summary": "SUSE Bug 963563 for CVE-2015-7576",
"url": "https://bugzilla.suse.com/963563"
},
{
"category": "external",
"summary": "SUSE Bug 970715 for CVE-2015-7576",
"url": "https://bugzilla.suse.com/970715"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 2.1:ruby2.1-rubygem-actionpack-4_2-4.2.2-6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 2.1:ruby2.1-rubygem-actionpack-4_2-4.2.2-6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-15T13:25:35Z",
"details": "moderate"
}
],
"title": "CVE-2015-7576"
},
{
"cve": "CVE-2015-7581",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7581"
}
],
"notes": [
{
"category": "general",
"text": "actionpack/lib/action_dispatch/routing/route_set.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service (superfluous caching and memory consumption) by leveraging an application\u0027s use of a wildcard controller route.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 2.1:ruby2.1-rubygem-actionpack-4_2-4.2.2-6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7581",
"url": "https://www.suse.com/security/cve/CVE-2015-7581"
},
{
"category": "external",
"summary": "SUSE Bug 963335 for CVE-2015-7581",
"url": "https://bugzilla.suse.com/963335"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 2.1:ruby2.1-rubygem-actionpack-4_2-4.2.2-6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 2.1:ruby2.1-rubygem-actionpack-4_2-4.2.2-6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-15T13:25:35Z",
"details": "moderate"
}
],
"title": "CVE-2015-7581"
},
{
"cve": "CVE-2016-0751",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0751"
}
],
"notes": [
{
"category": "general",
"text": "actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP Accept header.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 2.1:ruby2.1-rubygem-actionpack-4_2-4.2.2-6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0751",
"url": "https://www.suse.com/security/cve/CVE-2016-0751"
},
{
"category": "external",
"summary": "SUSE Bug 963331 for CVE-2016-0751",
"url": "https://bugzilla.suse.com/963331"
},
{
"category": "external",
"summary": "SUSE Bug 963627 for CVE-2016-0751",
"url": "https://bugzilla.suse.com/963627"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 2.1:ruby2.1-rubygem-actionpack-4_2-4.2.2-6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 2.1:ruby2.1-rubygem-actionpack-4_2-4.2.2-6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-15T13:25:35Z",
"details": "moderate"
}
],
"title": "CVE-2016-0751"
},
{
"cve": "CVE-2016-0752",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0752"
}
],
"notes": [
{
"category": "general",
"text": "Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application\u0027s unrestricted use of the render method and providing a .. (dot dot) in a pathname.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 2.1:ruby2.1-rubygem-actionpack-4_2-4.2.2-6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0752",
"url": "https://www.suse.com/security/cve/CVE-2016-0752"
},
{
"category": "external",
"summary": "SUSE Bug 963332 for CVE-2016-0752",
"url": "https://bugzilla.suse.com/963332"
},
{
"category": "external",
"summary": "SUSE Bug 963608 for CVE-2016-0752",
"url": "https://bugzilla.suse.com/963608"
},
{
"category": "external",
"summary": "SUSE Bug 968850 for CVE-2016-0752",
"url": "https://bugzilla.suse.com/968850"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 2.1:ruby2.1-rubygem-actionpack-4_2-4.2.2-6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 2.1:ruby2.1-rubygem-actionpack-4_2-4.2.2-6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-15T13:25:35Z",
"details": "moderate"
}
],
"title": "CVE-2016-0752"
}
]
}
gsd-2015-7581
Vulnerability from gsd
Modified
2016-01-25 00:00
Details
There is an object leak vulnerability for wildcard controllers in Action Pack.
This vulnerability has been assigned the CVE identifier CVE-2015-7581.
Versions Affected: >= 4.0.0 and < 5.0.0.beta1
Not affected: < 4.0.0, 5.0.0.beta1 and newer
Fixed Versions: 4.2.5.1, 4.1.14.1
Impact
------
Users that have a route that contains the string ":controller" are susceptible
to objects being leaked globally which can lead to unbounded memory growth.
To identify if your application is vulnerable, look for routes that contain
":controller".
Internally, Action Pack keeps a map of "url controller name" to "controller
class name". This map is cached globally, and is populated even if the
controller class doesn't actually exist.
All users running an affected release should either upgrade or use one of the
workarounds immediately.
Releases
--------
The FIXED releases are available at the normal locations.
Workarounds
-----------
There are no feasible workarounds for this issue.
Patches
-------
To aid users who aren't able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.
* 4-1-wildcard_route.patch - Patch for 4.1 series
* 4-2-wildcard_route.patch - Patch for 4.2 series
Please note that only the 4.1.x and 4.2.x series are supported at present. Users of earlier unsupported releases are advised to upgrade as soon as possible as we cannot guarantee the continued availability of security fixes for unsupported releases.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2015-7581",
"description": "actionpack/lib/action_dispatch/routing/route_set.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service (superfluous caching and memory consumption) by leveraging an application\u0027s use of a wildcard controller route.",
"id": "GSD-2015-7581",
"references": [
"https://www.suse.com/security/cve/CVE-2015-7581.html",
"https://www.debian.org/security/2016/dsa-3464",
"https://access.redhat.com/errata/RHSA-2016:0454",
"https://access.redhat.com/errata/RHSA-2016:0296"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"affected": [
{
"package": {
"ecosystem": "RubyGems",
"name": "actionpack",
"purl": "pkg:gem/actionpack"
}
}
],
"aliases": [
"CVE-2015-7581",
"GHSA-9h6g-gp95-x3q5"
],
"details": "There is an object leak vulnerability for wildcard controllers in Action Pack.\nThis vulnerability has been assigned the CVE identifier CVE-2015-7581.\n\nVersions Affected: \u003e= 4.0.0 and \u003c 5.0.0.beta1\nNot affected: \u003c 4.0.0, 5.0.0.beta1 and newer\nFixed Versions: 4.2.5.1, 4.1.14.1\n\nImpact\n------\nUsers that have a route that contains the string \":controller\" are susceptible\nto objects being leaked globally which can lead to unbounded memory growth.\nTo identify if your application is vulnerable, look for routes that contain\n\":controller\".\n\nInternally, Action Pack keeps a map of \"url controller name\" to \"controller\nclass name\". This map is cached globally, and is populated even if the\ncontroller class doesn\u0027t actually exist.\n\nAll users running an affected release should either upgrade or use one of the\nworkarounds immediately.\n\nReleases\n--------\nThe FIXED releases are available at the normal locations.\n\nWorkarounds\n-----------\nThere are no feasible workarounds for this issue.\n\nPatches\n-------\nTo aid users who aren\u0027t able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.\n\n* 4-1-wildcard_route.patch - Patch for 4.1 series\n* 4-2-wildcard_route.patch - Patch for 4.2 series\n\nPlease note that only the 4.1.x and 4.2.x series are supported at present. Users of earlier unsupported releases are advised to upgrade as soon as possible as we cannot guarantee the continued availability of security fixes for unsupported releases.\n",
"id": "GSD-2015-7581",
"modified": "2016-01-25T00:00:00.000Z",
"published": "2016-01-25T00:00:00.000Z",
"references": [
{
"type": "WEB",
"url": "https://groups.google.com/forum/#!topic/rubyonrails-security/dthJ5wL69JE"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": 7.5,
"type": "CVSS_V3"
}
],
"summary": "Object leak vulnerability for wildcard controller routes in Action Pack"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2015-7581",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "actionpack/lib/action_dispatch/routing/route_set.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service (superfluous caching and memory consumption) by leveraging an application\u0027s use of a wildcard controller route."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "[ruby-security-ann] 20160125 [CVE-2015-7581] Object leak vulnerability for wildcard controller routes in Action Pack",
"refsource": "MLIST",
"url": "https://groups.google.com/forum/message/raw?msg=ruby-security-ann/dthJ5wL69JE/IdvCimtZEgAJ"
},
{
"name": "openSUSE-SU-2016:0372",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html"
},
{
"name": "[oss-security] 20160125 [CVE-2015-7581] Object leak vulnerability for wildcard controller routes in Action Pack",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2016/01/25/16"
},
{
"name": "FEDORA-2016-94e71ee673",
"refsource": "FEDORA",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html"
},
{
"name": "FEDORA-2016-f486068393",
"refsource": "FEDORA",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178067.html"
},
{
"name": "SUSE-SU-2016:1146",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html"
},
{
"name": "1034816",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1034816"
},
{
"name": "DSA-3464",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2016/dsa-3464"
},
{
"name": "RHSA-2016:0296",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0296.html"
},
{
"name": "81677",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/81677"
}
]
}
},
"github.com/rubysec/ruby-advisory-db": {
"cve": "2015-7581",
"cvss_v3": 7.5,
"date": "2016-01-25",
"description": "There is an object leak vulnerability for wildcard controllers in Action Pack.\nThis vulnerability has been assigned the CVE identifier CVE-2015-7581.\n\nVersions Affected: \u003e= 4.0.0 and \u003c 5.0.0.beta1\nNot affected: \u003c 4.0.0, 5.0.0.beta1 and newer\nFixed Versions: 4.2.5.1, 4.1.14.1\n\nImpact\n------\nUsers that have a route that contains the string \":controller\" are susceptible\nto objects being leaked globally which can lead to unbounded memory growth.\nTo identify if your application is vulnerable, look for routes that contain\n\":controller\".\n\nInternally, Action Pack keeps a map of \"url controller name\" to \"controller\nclass name\". This map is cached globally, and is populated even if the\ncontroller class doesn\u0027t actually exist.\n\nAll users running an affected release should either upgrade or use one of the\nworkarounds immediately.\n\nReleases\n--------\nThe FIXED releases are available at the normal locations.\n\nWorkarounds\n-----------\nThere are no feasible workarounds for this issue.\n\nPatches\n-------\nTo aid users who aren\u0027t able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.\n\n* 4-1-wildcard_route.patch - Patch for 4.1 series\n* 4-2-wildcard_route.patch - Patch for 4.2 series\n\nPlease note that only the 4.1.x and 4.2.x series are supported at present. Users of earlier unsupported releases are advised to upgrade as soon as possible as we cannot guarantee the continued availability of security fixes for unsupported releases.\n",
"framework": "rails",
"gem": "actionpack",
"ghsa": "9h6g-gp95-x3q5",
"patched_versions": [
"~\u003e 4.2.5, \u003e= 4.2.5.1",
"~\u003e 4.1.14, \u003e= 4.1.14.1"
],
"title": "Object leak vulnerability for wildcard controller routes in Action Pack",
"unaffected_versions": [
"\u003c 4.0.0",
"\u003e= 5.0.0.beta1"
],
"url": "https://groups.google.com/forum/#!topic/rubyonrails-security/dthJ5wL69JE"
},
"gitlab.com": {
"advisories": [
{
"affected_range": "\u003e=4.2.0.alpha \u003c4.2.5.1||\u003e=4.0.0.alpha \u003c4.1.14.1",
"affected_versions": "All versions starting from 4.2.0.alpha before 4.2.5.1, all versions starting from 4.0.0.alpha before 4.1.14.1",
"cvss_v2": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"cvss_v3": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"cwe_ids": [
"CWE-1035",
"CWE-399",
"CWE-937"
],
"date": "2019-08-08",
"description": "Users that have a route that contains the string `:controller` are susceptible to objects being leaked globally which can lead to unbounded memory growth. To identify if your application is vulnerable, look for routes that contain `:controller`. ",
"fixed_versions": [
"4.1.14.1",
"4.2.5.1"
],
"identifier": "CVE-2015-7581",
"identifiers": [
"CVE-2015-7581"
],
"not_impacted": "3.x and 5.x",
"package_slug": "gem/actionpack",
"pubdate": "2016-02-15",
"solution": "Upgrade to latest, apply patch or use workaround. See provided link.",
"title": "Object leak vulnerability for wildcard controller routes",
"urls": [
"https://groups.google.com/forum/#!topic/rubyonrails-security/dthJ5wL69JE"
],
"uuid": "6a107475-017f-4a37-a5ad-8252fcda51fe"
}
]
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:5.0.0:beta1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.2.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.1.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.1.6:rc1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.1.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.1.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.1.0:beta1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.0.6:rc1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.0.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.0.1:rc2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.0.1:rc1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.2.0:beta1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.1.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.1.2:rc1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.1.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.0.6:rc3:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.0.6:rc2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.0.10:rc1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.0.1:rc4:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.0.1:rc3:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.0.0:-:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.2.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.2.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.1.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.1.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.1.0:-:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.0.9:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.0.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.0.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.0.1:-:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.0.0:rc2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.2.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.2.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.1.2:rc3:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.1.2:rc2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.0.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.0.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.0.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.0.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.0.0:rc1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:rubyonrails:rails:4.0.0:beta:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2015-7581"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "actionpack/lib/action_dispatch/routing/route_set.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service (superfluous caching and memory consumption) by leveraging an application\u0027s use of a wildcard controller route."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-399"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "[ruby-security-ann] 20160125 [CVE-2015-7581] Object leak vulnerability for wildcard controller routes in Action Pack",
"refsource": "MLIST",
"tags": [],
"url": "https://groups.google.com/forum/message/raw?msg=ruby-security-ann/dthJ5wL69JE/IdvCimtZEgAJ"
},
{
"name": "[oss-security] 20160125 [CVE-2015-7581] Object leak vulnerability for wildcard controller routes in Action Pack",
"refsource": "MLIST",
"tags": [],
"url": "http://www.openwall.com/lists/oss-security/2016/01/25/16"
},
{
"name": "81677",
"refsource": "BID",
"tags": [],
"url": "http://www.securityfocus.com/bid/81677"
},
{
"name": "SUSE-SU-2016:1146",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html"
},
{
"name": "FEDORA-2016-94e71ee673",
"refsource": "FEDORA",
"tags": [],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html"
},
{
"name": "RHSA-2016:0296",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0296.html"
},
{
"name": "FEDORA-2016-f486068393",
"refsource": "FEDORA",
"tags": [],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178067.html"
},
{
"name": "openSUSE-SU-2016:0372",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html"
},
{
"name": "DSA-3464",
"refsource": "DEBIAN",
"tags": [],
"url": "http://www.debian.org/security/2016/dsa-3464"
},
{
"name": "1034816",
"refsource": "SECTRACK",
"tags": [],
"url": "http://www.securitytracker.com/id/1034816"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM"
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
},
"lastModifiedDate": "2019-08-08T15:43Z",
"publishedDate": "2016-02-16T02:59Z"
}
}
}
cnvd-2016-00970
Vulnerability from cnvd
Title
Ruby on Rails Action Pack信息泄露漏洞
Description
Ruby on Rails是Rails核心团队开发维护的一套基于Ruby语言的开源Web应用框架。Action Pack是其中的一个用于构建和测试MVC Web应用程序的组件。
Ruby on Rails Action Pack存在安全漏洞，允许远程攻击者可利用该漏洞提交特殊请求获取敏感信息。
Severity
中
VLAI Severity ?
Patch Name
Ruby on Rails Action Pack信息泄露漏洞的补丁
Patch Description
Ruby on Rails是Rails核心团队开发维护的一套基于Ruby语言的开源Web应用框架。Action Pack是其中的一个用于构建和测试MVC Web应用程序的组件。
Ruby on Rails Action Pack存在安全漏洞，允许远程攻击者可利用该漏洞提交特殊请求获取敏感信息。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description
用户可参考如下厂商提供的安全补丁以修复该漏洞： http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/
Reference
http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/
Impacted products
| Name | Ruby on Rails Action Pack |
|---|
{
"bids": {
"bid": {
"bidNumber": "81677"
}
},
"cves": {
"cve": {
"cveNumber": "CVE-2015-7581"
}
},
"description": "Ruby on Rails\u662fRails\u6838\u5fc3\u56e2\u961f\u5f00\u53d1\u7ef4\u62a4\u7684\u4e00\u5957\u57fa\u4e8eRuby\u8bed\u8a00\u7684\u5f00\u6e90Web\u5e94\u7528\u6846\u67b6\u3002Action Pack\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u7528\u4e8e\u6784\u5efa\u548c\u6d4b\u8bd5MVC Web\u5e94\u7528\u7a0b\u5e8f\u7684\u7ec4\u4ef6\u3002\r\n\r\nRuby on Rails Action Pack\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u5141\u8bb8\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u63d0\u4ea4\u7279\u6b8a\u8bf7\u6c42\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002",
"discovererName": "Aaron Patterson",
"formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u5382\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u8865\u4e01\u4ee5\u4fee\u590d\u8be5\u6f0f\u6d1e\uff1a\r\nhttp://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2016-00970",
"openTime": "2016-02-16",
"patchDescription": "Ruby on Rails\u662fRails\u6838\u5fc3\u56e2\u961f\u5f00\u53d1\u7ef4\u62a4\u7684\u4e00\u5957\u57fa\u4e8eRuby\u8bed\u8a00\u7684\u5f00\u6e90Web\u5e94\u7528\u6846\u67b6\u3002Action Pack\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u7528\u4e8e\u6784\u5efa\u548c\u6d4b\u8bd5MVC Web\u5e94\u7528\u7a0b\u5e8f\u7684\u7ec4\u4ef6\u3002\r\n\r\nRuby on Rails Action Pack\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u5141\u8bb8\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u63d0\u4ea4\u7279\u6b8a\u8bf7\u6c42\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Ruby on Rails Action Pack\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u7684\u8865\u4e01",
"products": {
"product": "Ruby on Rails Action Pack"
},
"referenceLink": "http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/",
"serverity": "\u4e2d",
"submitTime": "2016-02-08",
"title": "Ruby on Rails Action Pack\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e"
}
fkie_cve-2015-7581
Vulnerability from fkie_nvd
Published
2016-02-16 02:59
Modified
2025-04-12 10:46
Severity ?
Summary
actionpack/lib/action_dispatch/routing/route_set.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service (superfluous caching and memory consumption) by leveraging an application's use of a wildcard controller route.
References
| URL | Tags | ||
|---|---|---|---|
| secalert@redhat.com | http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html | ||
| secalert@redhat.com | http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178067.html | ||
| secalert@redhat.com | http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html | ||
| secalert@redhat.com | http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html | ||
| secalert@redhat.com | http://rhn.redhat.com/errata/RHSA-2016-0296.html | ||
| secalert@redhat.com | http://www.debian.org/security/2016/dsa-3464 | ||
| secalert@redhat.com | http://www.openwall.com/lists/oss-security/2016/01/25/16 | ||
| secalert@redhat.com | http://www.securityfocus.com/bid/81677 | ||
| secalert@redhat.com | http://www.securitytracker.com/id/1034816 | ||
| secalert@redhat.com | https://groups.google.com/forum/message/raw?msg=ruby-security-ann/dthJ5wL69JE/IdvCimtZEgAJ | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178067.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://rhn.redhat.com/errata/RHSA-2016-0296.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.debian.org/security/2016/dsa-3464 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.openwall.com/lists/oss-security/2016/01/25/16 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/81677 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securitytracker.com/id/1034816 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://groups.google.com/forum/message/raw?msg=ruby-security-ann/dthJ5wL69JE/IdvCimtZEgAJ |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| rubyonrails | rails | 4.0.0 | |
| rubyonrails | rails | 4.0.0 | |
| rubyonrails | rails | 4.0.0 | |
| rubyonrails | rails | 4.0.0 | |
| rubyonrails | rails | 4.0.1 | |
| rubyonrails | rails | 4.0.1 | |
| rubyonrails | rails | 4.0.1 | |
| rubyonrails | rails | 4.0.1 | |
| rubyonrails | rails | 4.0.1 | |
| rubyonrails | rails | 4.0.2 | |
| rubyonrails | rails | 4.0.3 | |
| rubyonrails | rails | 4.0.4 | |
| rubyonrails | rails | 4.0.5 | |
| rubyonrails | rails | 4.0.6 | |
| rubyonrails | rails | 4.0.6 | |
| rubyonrails | rails | 4.0.6 | |
| rubyonrails | rails | 4.0.6 | |
| rubyonrails | rails | 4.0.7 | |
| rubyonrails | rails | 4.0.8 | |
| rubyonrails | rails | 4.0.9 | |
| rubyonrails | rails | 4.0.10 | |
| rubyonrails | rails | 4.1.0 | |
| rubyonrails | rails | 4.1.0 | |
| rubyonrails | rails | 4.1.1 | |
| rubyonrails | rails | 4.1.2 | |
| rubyonrails | rails | 4.1.2 | |
| rubyonrails | rails | 4.1.2 | |
| rubyonrails | rails | 4.1.2 | |
| rubyonrails | rails | 4.1.3 | |
| rubyonrails | rails | 4.1.4 | |
| rubyonrails | rails | 4.1.5 | |
| rubyonrails | rails | 4.1.6 | |
| rubyonrails | rails | 4.1.7 | |
| rubyonrails | rails | 4.1.8 | |
| rubyonrails | rails | 4.2.0 | |
| rubyonrails | rails | 4.2.1 | |
| rubyonrails | rails | 4.2.2 | |
| rubyonrails | rails | 4.2.3 | |
| rubyonrails | rails | 4.2.4 | |
| rubyonrails | rails | 4.2.5 | |
| rubyonrails | rails | 5.0.0 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.0.0:-:*:*:*:*:*:*",
"matchCriteriaId": "2E950E33-CD03-45F5-83F9-F106060B4A8B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.0.0:beta:*:*:*:*:*:*",
"matchCriteriaId": "547C62C8-4B3E-431B-AA73-5C42ED884671",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.0.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "4CDAD329-35F7-4C82-8019-A0CF6D069059",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.0.0:rc2:*:*:*:*:*:*",
"matchCriteriaId": "56D3858B-0FEE-4E8D-83C2-68AF0431F478",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.0.1:-:*:*:*:*:*:*",
"matchCriteriaId": "254884EE-EBA4-45D0-9704-B5CB22569668",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.0.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "35FC7015-267C-403B-A23D-EDA6223D2104",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.0.1:rc2:*:*:*:*:*:*",
"matchCriteriaId": "5C913A56-959D-44F1-BD89-D246C66D1F09",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.0.1:rc3:*:*:*:*:*:*",
"matchCriteriaId": "5D5BA926-38EE-47BE-9D16-FDCF360A503B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.0.1:rc4:*:*:*:*:*:*",
"matchCriteriaId": "18EA25F1-279A-4F1A-883D-C064369F592E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "FD794856-6F30-4ABF-8AE4-720BB75E6F89",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "B4199B8B-A6F9-4BFD-8D27-0E663D8C579D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.0.4:*:*:*:*:*:*:*",
"matchCriteriaId": "F11E76A3-FA5B-4038-AB52-3D7D5E54D8A2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.0.5:*:*:*:*:*:*:*",
"matchCriteriaId": "767C481D-6616-4CA9-9A9B-C994D9121796",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.0.6:*:*:*:*:*:*:*",
"matchCriteriaId": "D5496953-0C5E-45F8-A7FB-240CEC2CCEB8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.0.6:rc1:*:*:*:*:*:*",
"matchCriteriaId": "CA46B621-125E-497F-B2DE-91C989B25936",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.0.6:rc2:*:*:*:*:*:*",
"matchCriteriaId": "B3239443-2E19-4540-BA0C-05A27E44CB6C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.0.6:rc3:*:*:*:*:*:*",
"matchCriteriaId": "104AC9CF-6611-4469-9852-7FDAF4EC7638",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.0.7:*:*:*:*:*:*:*",
"matchCriteriaId": "DC9E1864-B1E5-42C3-B4AF-9A002916B66D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.0.8:*:*:*:*:*:*:*",
"matchCriteriaId": "31AC91AA-6A9A-43B4-B3E9-A66A34B6E612",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.0.9:*:*:*:*:*:*:*",
"matchCriteriaId": "A462C151-982E-4A83-A376-025015F40645",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.0.10:rc1:*:*:*:*:*:*",
"matchCriteriaId": "578CC013-776B-4868-B448-B7ACAF3AF832",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.1.0:-:*:*:*:*:*:*",
"matchCriteriaId": "C310EA3E-399A-48FD-8DE9-6950E328CF23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.1.0:beta1:*:*:*:*:*:*",
"matchCriteriaId": "293B2998-5169-4960-BEC4-21DAC837E32B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "EAB8D57F-9849-428C-B8E9-D0A1020728BB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "B0359DA8-6B41-46C5-AA95-41B1B366DD4A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.1.2:rc1:*:*:*:*:*:*",
"matchCriteriaId": "0965BDB6-9644-465C-AA32-9278B2D53197",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.1.2:rc2:*:*:*:*:*:*",
"matchCriteriaId": "7F6B15CF-37C1-4C9B-8457-4A8C9A480188",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.1.2:rc3:*:*:*:*:*:*",
"matchCriteriaId": "072EB16D-1325-4869-B156-65E786A834C7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "847B3C3D-8656-404D-A954-09C159EDC8E2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.1.4:*:*:*:*:*:*:*",
"matchCriteriaId": "65CA2D50-B33C-4088-BDDF-EB964C9A092C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.1.5:*:*:*:*:*:*:*",
"matchCriteriaId": "CADB5989-5260-4F60-ACF2-BEB6D7F97654",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.1.6:rc1:*:*:*:*:*:*",
"matchCriteriaId": "509597D0-22E1-4BE8-95AD-C54FE4D15FA4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.1.7:*:*:*:*:*:*:*",
"matchCriteriaId": "539C550D-FEDD-415E-95AE-40E1AE2BAF1A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.1.8:*:*:*:*:*:*:*",
"matchCriteriaId": "59C5B869-74FC-4051-A103-A721332B3CF2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.2.0:beta1:*:*:*:*:*:*",
"matchCriteriaId": "709A19A5-8FD1-4F9C-A38C-F06242A94D68",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "83F1142C-3BFB-4B72-A033-81E20DB19D02",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "81D717DB-7C80-48AA-A774-E291D2E75D6E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "06B357FB-0307-4EFA-9C5B-3C2CDEA48584",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "79D5B492-43F9-470F-BD21-6EFD93E78453",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:4.2.5:*:*:*:*:*:*:*",
"matchCriteriaId": "F6A1C015-56AD-489C-B301-68CF1DBF1BEF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:5.0.0:beta1:*:*:*:*:*:*",
"matchCriteriaId": "AF8F94CF-D504-4165-A69E-3F1198CB162A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "actionpack/lib/action_dispatch/routing/route_set.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service (superfluous caching and memory consumption) by leveraging an application\u0027s use of a wildcard controller route."
},
{
"lang": "es",
"value": "actionpack/lib/action_dispatch/routing/route_set.rb en Action Pack en Ruby on Rails 4.x en versiones anteriores a 4.2.5.1 y 5.x en versiones anteriores a 5.0.0.beta1.1 permite a atacantes remotos causar una denegaci\u00f3n de servicio (almacenamiento en cach\u00e9 superfluo y consumo de memoria) aprovechando el uso de una ruta de controlador comod\u00edn por una aplicaci\u00f3n."
}
],
"id": "CVE-2015-7581",
"lastModified": "2025-04-12T10:46:40.837",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary"
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2016-02-16T02:59:04.877",
"references": [
{
"source": "secalert@redhat.com",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178067.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html"
},
{
"source": "secalert@redhat.com",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0296.html"
},
{
"source": "secalert@redhat.com",
"url": "http://www.debian.org/security/2016/dsa-3464"
},
{
"source": "secalert@redhat.com",
"url": "http://www.openwall.com/lists/oss-security/2016/01/25/16"
},
{
"source": "secalert@redhat.com",
"url": "http://www.securityfocus.com/bid/81677"
},
{
"source": "secalert@redhat.com",
"url": "http://www.securitytracker.com/id/1034816"
},
{
"source": "secalert@redhat.com",
"url": "https://groups.google.com/forum/message/raw?msg=ruby-security-ann/dthJ5wL69JE/IdvCimtZEgAJ"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178067.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0296.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.debian.org/security/2016/dsa-3464"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.openwall.com/lists/oss-security/2016/01/25/16"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/81677"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securitytracker.com/id/1034816"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://groups.google.com/forum/message/raw?msg=ruby-security-ann/dthJ5wL69JE/IdvCimtZEgAJ"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-399"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…