Red Hat Security AdvisoryRHSA-2014:0876
ruby193-rubygem-activerecord security update
Released 2014-07-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6) ruby193-rubygem-activerecord-1:3.2.8-8.2.el6, ruby193-rubygem-activerecord-doc-1:3.2.8-8.2.el6
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7) ruby193-rubygem-activerecord-1:3.2.8-8.2.el7, ruby193-rubygem-activerecord-doc-1:3.2.8-8.2.el7
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4) ruby193-rubygem-activerecord-1:3.2.8-8.2.el6, ruby193-rubygem-activerecord-doc-1:3.2.8-8.2.el6
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6) ruby193-rubygem-activerecord-1:3.2.8-8.2.el6, ruby193-rubygem-activerecord-doc-1:3.2.8-8.2.el6
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7) ruby193-rubygem-activerecord-1:3.2.8-8.2.el7, ruby193-rubygem-activerecord-doc-1:3.2.8-8.2.el7
Fixes 1 record
Priority MEDIUM 40
SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql_adapter.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 2.x and 3.x before 3.2.19 allows remote attackers to ex…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04278 · Published 2014-07-07 · Partial fix · 3.2.19 CWE-89
