Alerts This Week
Warning Icon 1 535
Alerts This Week
Warning Icon 1 535

Fedora 11: 2009-10484 Moderate: Rubygem Rails XSS Issue Fix

fedora
Calendar Grey October 13, 2009
Dist Fedora Esm H88
To fix issues with the latest Fedora update of rubygem-rails, consider downgrading to a previous version for critical apps using essential data.
- Fixes CVE-2009-3009 - Downgrade to Rails 2.3.2 to avoid update issues for existing applications

Summary

Rails is a framework for building web-application using CGI, FCGI, mod_ruby,

or WEBrick on top of either MySQL, PostgreSQL, SQLite, DB2, SQL Server, or

Oracle with eRuby- or Builder-based templates.

Update Information:

- Fixes CVE-2009-3009 - Downgrade to Rails 2.3.2 to avoid update issues for existing applications

Topics%20covered

Topics Covered

security advisory moderate Fedora XSS web framework rubygem

Change Log

* Wed Oct 7 2009 David Lutterkort - 1:2.3.2-5 - Remove geminstdir/guides from files; it's not in 2.3.2 * Wed Oct 7 2009 David Lutterkort - 1:2.3.2-4 - Bump epoch; rails is not updatable across versions (bz 520843) * Wed Sep 30 2009 David Lutterkort - 2.3.3-4 - Restore fix for bz 496480 * Sun Sep 27 2009 Mamoru Tasaka - 2.3.3-3 - Force rebuild * Wed Aug 12 2009 Jeroen van Meeuwen - 2.3.3-2 - Don't delete zero-length files (#496480, mtasaka) * Sun Jul 26 2009 Jeroen van Meeuwen - 2.3.3-1 - New upstream version

References


[ 1 ] Bug #520843 - CVE-2009-3009 ruby-activesupport: XSS vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=520843

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update rubygem-rails' at the command line. For more information, refer to "Managing Software with yum", available at .

Name: rubygem-rails
Product: Fedora 11
Version: 2.3.2
Release: 5.fc11
URL: https://rubyonrails.org/
Summary: Web-application framework

Topics%20covered

Topics Covered

security advisory moderate Fedora XSS web framework rubygem

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here