Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Fedora 22: Security Notice Regarding Rubygem-Activemodel CVE-2015-7581

fedora
Calendar Grey February 28, 2016
Dist Fedora Esm H88
Fedora 23 security patch for rubygem-activerecord tackles serious vulnerabilities that involve data sanitization and resource mismanagement.
Security fix for CVE-2015-7581 CVE-2015-7576 CVE-2016-0751 CVE-2016-0752 CVE-2016-0753

Summary

Rich support for attributes, callbacks, validations, observers,

serialization, internationalization, and testing. It provides a known

set of interfaces for usage in model classes. It also helps building

custom ORMs for use outside of the Rails framework.

Update Information:

Security fix for CVE-2015-7581 CVE-2015-7576 CVE-2016-0751 CVE-2016-0752 CVE-2016-0753

Topics%20covered

Topics Covered

security advisory denial of service Fedora input validation object leak

Change Log

References


[ 1 ] Bug #1301973 - CVE-2016-0753 rubygem-activemodel, rubygem-activerecord: possible input validation circumvention in Active Model https://bugzilla.redhat.com/show_bug.cgi?id=1301973 [ 2 ] Bug #1301933 - CVE-2015-7576 rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller https://bugzilla.redhat.com/show_bug.cgi?id=1301933 [ 3 ] Bug #1301946 - CVE-2016-0751 rubygem-actionpack: possible object leak and denial of service attack in Action Pack https://bugzilla.redhat.com/show_bug.cgi?id=1301946 [ 4 ] Bug #1301981 - CVE-2015-7581 rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack https://bugzilla.redhat.com/show_bug.cgi?id=1301981

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update rubygem-activemodel' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: rubygem-activemodel
Product: Fedora 22
Version: 4.2.0
Release: 2.fc22
URL: https://rubyonrails.org/
Summary: A toolkit for building modeling frameworks

Topics%20covered

Topics Covered

security advisory denial of service Fedora input validation object leak

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.