Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Fedora: 2009-10484 Moderate: Actionmailer Email Vulnerability Fix

fedora
Calendar Grey October 13, 2009
Scroller Fedora
Upgrade the rubygem-actionmailer package on Fedora by updating your system, checking current versions, and running gem updates for security
- Fixes CVE-2009-3009 - Downgrade to Rails 2.3.2 to avoid update issues for existing applications

Summary

Makes it trivial to test and deliver emails sent from a single service layer.

Update Information:

- Fixes CVE-2009-3009 - Downgrade to Rails 2.3.2 to avoid update issues for existing applications

Topics%20covered

Topics Covered

security advisory moderate Fedora bug fix update notification email vulnerability rubygem-actionmailer

Change Log

* Wed Oct 7 2009 David Lutterkort - 1:2.3.2-3 - Bump epoch; rails is not updatable across versions (bz 520843) - Kill test for now * Sun Sep 27 2009 Mamoru Tasaka - 2.3.3-3 - Force rebuild * Sun Aug 2 2009 Jeroen van Meeuwen - 2.3.3-2 - Disable test * Sun Aug 2 2009 Mamoru Tasaka - 2.3.3-1 - 2.3.3 - Enable test * Sun Jul 26 2009 Fedora Release Engineering - 2.3.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

References


[ 1 ] Bug #520843 - CVE-2009-3009 ruby-activesupport: XSS vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=520843

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update rubygem-actionmailer' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: rubygem-actionmailer
Product: Fedora 11
Version: 2.3.2
Release: 3.fc11
URL: https://rubyonrails.org/
Summary: Service layer for easy email delivery and testing

Topics%20covered

Topics Covered

security advisory moderate Fedora bug fix update notification email vulnerability rubygem-actionmailer

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.