Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Производитель ПО
Наименование ПО
libactionmailer-ruby
(any)
libactionmailer-ruby1.8
(any)
libactionpack-ruby
(any)
libactionpack-ruby1.8
(any)
libactiverecord-ruby
(any)
libactiverecord-ruby1.8
(any)
libactiverecord-ruby1.9.1
(any)
libactiveresource-ruby
(any)
libactiveresource-ruby1.8
(any)
libactivesupport-ruby
(any)
libactivesupport-ruby1.8
(any)
libactivesupport-ruby1.9.1
(any)
rails
(any)
rails-doc
(any)
rails-ruby1.8
(any)
Описание
Уведомление безопасности об уязвимостях libactiveresource-ruby1.8, libactiverecord-ruby1.9.1, libactionmailer-ruby1.8, rails-ruby1.8, rails-doc, libactivesupport-ruby1.8, libactiveresource-ruby, libactiverecord-ruby1.8, rails, libactionpack-ruby, libactionmailer-ruby, libactivesupport-ruby, libactiverecord-ruby, libactionpack-ruby1.8, libactivesupport-ruby1.9.1
Как исправить
Проблема может быть решена обновлением операционной системыдо следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 6:
noarch:
libactionmailer-ruby - 2.3.5-1.2+squeeze1
libactionmailer-ruby1.8 - 2.3.5-1.2+squeeze1
libactionpack-ruby - 2.3.5-1.2+squeeze1
libactionpack-ruby1.8 - 2.3.5-1.2+squeeze1
libactiverecord-ruby - 2.3.5-1.2+squeeze1
libactiverecord-ruby1.8 - 2.3.5-1.2+squeeze1
libactiverecord-ruby1.9.1 - 2.3.5-1.2+squeeze1
libactiveresource-ruby - 2.3.5-1.2+squeeze1
libactiveresource-ruby1.8 - 2.3.5-1.2+squeeze1
libactivesupport-ruby - 2.3.5-1.2+squeeze1
libactivesupport-ruby1.8 - 2.3.5-1.2+squeeze1
libactivesupport-ruby1.9.1 - 2.3.5-1.2+squeeze1
rails - 2.3.5-1.2+squeeze1
rails-doc - 2.3.5-1.2+squeeze1
rails-ruby1.8 - 2.3.5-1.2+squeeze1
Debian GNU/Linux 5:
noarch:
rails - 2.1.0-7+lenny1
Debian GNU/Linux 6:
noarch:
libactionmailer-ruby - 2.3.5-1.2+squeeze1
libactionmailer-ruby1.8 - 2.3.5-1.2+squeeze1
libactionpack-ruby - 2.3.5-1.2+squeeze1
libactionpack-ruby1.8 - 2.3.5-1.2+squeeze1
libactiverecord-ruby - 2.3.5-1.2+squeeze1
libactiverecord-ruby1.8 - 2.3.5-1.2+squeeze1
libactiverecord-ruby1.9.1 - 2.3.5-1.2+squeeze1
libactiveresource-ruby - 2.3.5-1.2+squeeze1
libactiveresource-ruby1.8 - 2.3.5-1.2+squeeze1
libactivesupport-ruby - 2.3.5-1.2+squeeze1
libactivesupport-ruby1.8 - 2.3.5-1.2+squeeze1
libactivesupport-ruby1.9.1 - 2.3.5-1.2+squeeze1
rails - 2.3.5-1.2+squeeze1
rails-doc - 2.3.5-1.2+squeeze1
rails-ruby1.8 - 2.3.5-1.2+squeeze1
Debian GNU/Linux 5:
noarch:
rails - 2.1.0-7+lenny1
Ссылки
http://www.debian.org/security/dsa-2301/
Источник: CVE
Наименование: CVE-2011-2931
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2931
Источник: CVE
Наименование: CVE-2011-2930
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2930
Источник: CVE
Наименование: CVE-2011-3186
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3186
Источник: CVE
Наименование: CVE-2009-4214
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4214
Источник: CVE
Наименование: CVE-2011-2931
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2931
Источник: CVE
Наименование: CVE-2011-2930
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2930
Источник: CVE
Наименование: CVE-2011-3186
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3186
Источник: CVE
Наименование: CVE-2009-4214
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4214
