FEDORA-2016-f486068393 — security update for rubygem-actionpack

FEDORA-2016-f486068393 created by pvalena 3 years ago for Fedora 23

stable

Security fix for CVE-2015-7581 Security fix for CVE-2016-0751 Security fix for CVE-2015-7576

sudo dnf upgrade --advisory=FEDORA-2016-f486068393

This update has been submitted for testing by pvalena. 3 years ago

This update has been pushed to testing. 3 years ago

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes 3 years ago

This update has been submitted for stable by pvalena. 3 years ago

This update has been pushed to stable. 3 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

Builds

Settings

Unstable by Karma

-3

Stable by Karma

Dates

submitted

3 years ago

in testing

3 years ago

in stable

3 years ago

BZ#1301933 CVE-2015-7576 rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller

BZ#1301946 CVE-2016-0751 rubygem-actionpack: possible object leak and denial of service attack in Action Pack

BZ#1301948 CVE-2016-0751 rubygem-actionpack: Possible Object Leak and Denial of Service attack in Action Pack [fedora-all]

BZ#1301981 CVE-2015-7581 rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack

BZ#1301983 CVE-2015-7581 rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack [fedora-all]

BZ#1301996 CVE-2015-7576 rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller [fedora-all]