rpm package
suse/rubygem-activesupport-3_2&distro=SUSE Lifecycle Management Server 1.3
pkg:rpm/suse/rubygem-activesupport-3_2&distro=SUSE%20Lifecycle%20Management%20Server%201.3
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2015-7576 | Low | 3.7 | < 3.2.12-0.18.1 | 3.2.12-0.18.1 | Feb 16, 2016 | The http_basic_authenticate_with method in actionpack/lib/action_controller/metal/http_authentication.rb in the Basic Authentication implementation in Action Controller in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.b | |
| CVE-2015-3227 | — | < 3.2.12-0.14.3 | 3.2.12-0.14.3 | Jul 26, 2015 | The (1) jdom.rb and (2) rexml.rb components in Active Support in Ruby on Rails before 4.1.11 and 4.2.x before 4.2.2, when JDOM or REXML is enabled, allow remote attackers to cause a denial of service (SystemStackError) via a large XML document depth. |
- affected < 3.2.12-0.18.1fixed 3.2.12-0.18.1
The http_basic_authenticate_with method in actionpack/lib/action_controller/metal/http_authentication.rb in the Basic Authentication implementation in Action Controller in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.b
- CVE-2015-3227Jul 26, 2015affected < 3.2.12-0.14.3fixed 3.2.12-0.14.3
The (1) jdom.rb and (2) rexml.rb components in Active Support in Ruby on Rails before 4.1.11 and 4.2.x before 4.2.2, when JDOM or REXML is enabled, allow remote attackers to cause a denial of service (SystemStackError) via a large XML document depth.