DSA-5372: -1 rails -- security update
Published Mar 13, 2023
·Updated
Multiple vulnerabilities were discovered in rails, the Ruby based server-side MVC web application framework, which could result in XSS, data disclosure and open redirect.
Affected Software
2 affected components
debian/rails
debian/rails
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
railsto a version that resolves this vulnerability.Patch DSA-5372-1
Event History
Mar 13, 2023
Advisory Published
12:00 AM
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
1
What types of impact are covered by this update?
The update addresses multiple Rails vulnerabilities that could lead to cross-site scripting, data disclosure, and open redirects.
2
Which deployments should be reviewed?
Review systems using the Debian rails package, as the advisory identifies vulnerabilities in that software package.