FEDORA-2016-f486068393 — security update for rubygem-actionpack

FEDORA-2016-f486068393 created by pvalena 3 years ago for Fedora 23

stable

Security fix for CVE-2015-7581 Security fix for CVE-2016-0751 Security fix for CVE-2015-7576

sudo dnf upgrade --advisory=FEDORA-2016-f486068393

This update has been submitted for testing by pvalena.

This update has been pushed to testing.

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

This update has been submitted for stable by pvalena.

This update has been pushed to stable.

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

Builds

Settings

Unstable by Karma

-3

Stable by Karma

Dates

submitted

3 years ago

in testing

3 years ago

in stable

3 years ago

BZ#1301933 CVE-2015-7576 rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller

BZ#1301946 CVE-2016-0751 rubygem-actionpack: possible object leak and denial of service attack in Action Pack

BZ#1301948 CVE-2016-0751 rubygem-actionpack: Possible Object Leak and Denial of Service attack in Action Pack [fedora-all]

BZ#1301981 CVE-2015-7581 rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack

BZ#1301983 CVE-2015-7581 rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack [fedora-all]

BZ#1301996 CVE-2015-7576 rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller [fedora-all]