Red Hat Security AdvisoryRHSA-2014:0877
ror40-rubygem-activerecord security update
Released 2014-07-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6) ror40-rubygem-activerecord-1:4.0.2-2.2.el6, ror40-rubygem-activerecord-doc-1:4.0.2-2.2.el6
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7) ror40-rubygem-activerecord-1:4.0.2-2.2.el7, ror40-rubygem-activerecord-doc-1:4.0.2-2.2.el7
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4) ror40-rubygem-activerecord-1:4.0.2-2.2.el6, ror40-rubygem-activerecord-doc-1:4.0.2-2.2.el6
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6) ror40-rubygem-activerecord-1:4.0.2-2.2.el6, ror40-rubygem-activerecord-doc-1:4.0.2-2.2.el6
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7) ror40-rubygem-activerecord-1:4.0.2-2.2.el7, ror40-rubygem-activerecord-doc-1:4.0.2-2.2.el7
Fixes 1 record
Priority MEDIUM 40
SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/quoting.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 4.x before 4.0.7 and 4.1.x before 4.1.3 allows remote a…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04181 · Published 2014-07-07 · Fixed in 4.0.7, 4.1.3 CWE-89
