Gentoo: GLSA 200912-02 Normal: Ruby on Rails SQL Injection and CSRF

Gentoo Linux Security Advisory GLSA 200912-02 https://security.gentoo.org/ Severity: Normal Title: Ruby on Rails: Multiple vulnerabilities Date: December 20, 2009 Bugs: #200159, #237385, #247549, #276279, #283396, #294797 ID: 200912-02

Synopsis ======= Multiple vulnerabilities have been discovered in Rails, the worst of which leading to the execution of arbitrary SQL statements.
Background ========= Ruby on Rails is a web-application and persistence framework.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-ruby/rails < 2.2.2 >= 2.3.5 *>= 2.2.3-r1
========== The following vulnerabilities we...