Red Hat Security AdvisoryRHSA-2013:0698
rubygem-actionpack and ruby193-rubygem-actionpack security update
Released 2013-04-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Enterprise Infrastructure ruby193-rubygem-actionpack-1:3.2.8-5.el6, ruby193-rubygem-actionpack-doc-1:3.2.8-5.el6, rubygem-actionpack-1:3.0.13-8.el6op
- Red Hat OpenShift Enterprise Node ruby193-rubygem-actionpack-1:3.2.8-5.el6, ruby193-rubygem-actionpack-doc-1:3.2.8-5.el6
Fixes 2 records
Priority LOW 25
The sanitize_css method in lib/action_controller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0263 · Published 2013-03-19 · Partial fix · 2.3.18, 3.1.12 +1 CWE-79
Priority LOW 24
The sanitize helper in lib/action_controller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly han…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01853 · Published 2013-03-19 · Partial fix · 2.3.18, 3.1.12 +1 CWE-79
