CVE catalog

CVE-2016-2098

rails: CVE-2016-2098

[CVE catalog]

Severity
High · CVSS 7.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Published
Source
[NVD] · [CVE record]
EPSS
81.45% · Oct 25, 2026

Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianrailssid2:7.2.4+dfsg-2fixed
Debianrailsforky2:7.2.4+dfsg-1fixed
Debianrailstrixie2:7.2.2.2+dfsg-2~deb13u1fixed
Debianrailstrixie-security2:7.2.2.2+dfsg-2~deb13u2fixed
Debianrailsbookworm2:6.1.7.10+dfsg-1~deb12u2fixed
Debianrailsbookworm-security2:6.1.7.10+dfsg-1~deb12u3fixed
Suserubygem-actionview-4_2openstack cloud 64.2.2-8.1fixed
Suserubygem-actionview-4_2enterprise storage 2.14.2.2-8.1fixed
Suserubygem-actionmailer-4_2openstack cloud 64.2.9-3.3.1fixed
Suserubygem-actionpack-4_2openstack cloud 64.2.9-7.3.1fixed
Suserubygem-actionview-4_2openstack cloud 64.2.9-9.3.1fixed
Suserubygem-activejob-4_2openstack cloud 64.2.9-3.3.1fixed
Suserubygem-activemodel-4_2openstack cloud 64.2.9-6.3.1fixed
Suserubygem-activerecord-4_2openstack cloud 64.2.9-6.3.1fixed
Suserubygem-activesupport-4_2openstack cloud 64.2.9-7.3.1fixed
Suserubygem-rails-4_2openstack cloud 64.2.9-3.3.1fixed
Suserubygem-rails-html-sanitizeropenstack cloud 61.0.3-8.3.1fixed
Suserubygem-railties-4_2openstack cloud 64.2.9-3.3.1fixed
Suserubygem-actionmailer-4_2openstack cloud 74.2.9-3.3.1fixed
Suserubygem-actionpack-4_2openstack cloud 74.2.9-7.3.1fixed
Suserubygem-actionview-4_2openstack cloud 74.2.9-9.3.1fixed
Suserubygem-activejob-4_2openstack cloud 74.2.9-3.3.1fixed
Suserubygem-activemodel-4_2openstack cloud 74.2.9-6.3.1fixed
Suserubygem-activerecord-4_2openstack cloud 74.2.9-6.3.1fixed
Suserubygem-activesupport-4_2openstack cloud 74.2.9-7.3.1fixed
Suserubygem-rails-4_2openstack cloud 74.2.9-3.3.1fixed
Suserubygem-rails-html-sanitizeropenstack cloud 71.0.3-8.3.1fixed
Suserubygem-railties-4_2openstack cloud 74.2.9-3.3.1fixed
Suserubygem-actionmailer-4_2enterprise storage 34.2.9-3.3.1fixed
Suserubygem-actionpack-4_2enterprise storage 34.2.9-7.3.1fixed
Suserubygem-actionview-4_2enterprise storage 34.2.9-9.3.1fixed
Suserubygem-activejob-4_2enterprise storage 34.2.9-3.3.1fixed
Suserubygem-activemodel-4_2enterprise storage 34.2.9-6.3.1fixed
Suserubygem-activerecord-4_2enterprise storage 34.2.9-6.3.1fixed
Suserubygem-activesupport-4_2enterprise storage 34.2.9-7.3.1fixed
Suserubygem-rails-4_2enterprise storage 34.2.9-3.3.1fixed
Suserubygem-rails-html-sanitizerenterprise storage 31.0.3-8.3.1fixed
Suserubygem-railties-4_2enterprise storage 34.2.9-3.3.1fixed
Suserubygem-actionmailer-4_2enterprise storage 44.2.9-3.3.1fixed
Suserubygem-actionpack-4_2enterprise storage 44.2.9-7.3.1fixed
Suserubygem-actionview-4_2enterprise storage 44.2.9-9.3.1fixed
Suserubygem-activejob-4_2enterprise storage 44.2.9-3.3.1fixed
Suserubygem-activemodel-4_2enterprise storage 44.2.9-6.3.1fixed
Suserubygem-activerecord-4_2enterprise storage 44.2.9-6.3.1fixed
Suserubygem-activesupport-4_2enterprise storage 44.2.9-7.3.1fixed
Suserubygem-rails-4_2enterprise storage 44.2.9-3.3.1fixed
Suserubygem-rails-html-sanitizerenterprise storage 41.0.3-8.3.1fixed
Suserubygem-railties-4_2enterprise storage 44.2.9-3.3.1fixed
Opensuserubygem-actionview-4_2tumbleweed5.0.0.1-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianrailssourcesid2:4.2.5.2-1not yet assignedNot reportedNot reported
Debianrailssourceforky2:4.2.5.2-1not yet assignedNot reportedNot reported
Debianrailssourcetrixie2:4.2.5.2-1not yet assignedNot reportedNot reported
Debianrailssourcebookworm2:4.2.5.2-1not yet assignedNot reportedNot reported
Suserubygem-actionview-4_2rpmopenstack cloud 64.2.2-8.1Not reportedSUSE-SU-2016:0867-1Not reported
Suserubygem-actionview-4_2rpmenterprise storage 2.14.2.2-8.1Not reportedSUSE-SU-2016:0867-1Not reported
Suserubygem-actionmailer-4_2rpmopenstack cloud 64.2.9-3.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-actionpack-4_2rpmopenstack cloud 64.2.9-7.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-actionview-4_2rpmopenstack cloud 64.2.9-9.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-activejob-4_2rpmopenstack cloud 64.2.9-3.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-activemodel-4_2rpmopenstack cloud 64.2.9-6.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-activerecord-4_2rpmopenstack cloud 64.2.9-6.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-activesupport-4_2rpmopenstack cloud 64.2.9-7.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-rails-4_2rpmopenstack cloud 64.2.9-3.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-rails-html-sanitizerrpmopenstack cloud 61.0.3-8.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-railties-4_2rpmopenstack cloud 64.2.9-3.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-actionmailer-4_2rpmopenstack cloud 74.2.9-3.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-actionpack-4_2rpmopenstack cloud 74.2.9-7.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-actionview-4_2rpmopenstack cloud 74.2.9-9.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-activejob-4_2rpmopenstack cloud 74.2.9-3.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-activemodel-4_2rpmopenstack cloud 74.2.9-6.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-activerecord-4_2rpmopenstack cloud 74.2.9-6.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-activesupport-4_2rpmopenstack cloud 74.2.9-7.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-rails-4_2rpmopenstack cloud 74.2.9-3.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-rails-html-sanitizerrpmopenstack cloud 71.0.3-8.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-railties-4_2rpmopenstack cloud 74.2.9-3.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-actionmailer-4_2rpmenterprise storage 34.2.9-3.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-actionpack-4_2rpmenterprise storage 34.2.9-7.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-actionview-4_2rpmenterprise storage 34.2.9-9.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-activejob-4_2rpmenterprise storage 34.2.9-3.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-activemodel-4_2rpmenterprise storage 34.2.9-6.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-activerecord-4_2rpmenterprise storage 34.2.9-6.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-activesupport-4_2rpmenterprise storage 34.2.9-7.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-rails-4_2rpmenterprise storage 34.2.9-3.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-rails-html-sanitizerrpmenterprise storage 31.0.3-8.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-railties-4_2rpmenterprise storage 34.2.9-3.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-actionmailer-4_2rpmenterprise storage 44.2.9-3.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-actionpack-4_2rpmenterprise storage 44.2.9-7.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-actionview-4_2rpmenterprise storage 44.2.9-9.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-activejob-4_2rpmenterprise storage 44.2.9-3.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-activemodel-4_2rpmenterprise storage 44.2.9-6.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-activerecord-4_2rpmenterprise storage 44.2.9-6.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-activesupport-4_2rpmenterprise storage 44.2.9-7.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-rails-4_2rpmenterprise storage 44.2.9-3.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-rails-html-sanitizerrpmenterprise storage 41.0.3-8.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Suserubygem-railties-4_2rpmenterprise storage 44.2.9-3.3.1Not reportedSUSE-SU-2017:2716-1Not reported
Opensuserubygem-actionview-4_2rpmtumbleweed5.0.0.1-1.1Not reportedOPENSUSE-SU-2024:10057-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [rails]Unknown
    Details (4)

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

  • [ruby-actioncable]Unknown

    Source package: [rails]

    Details (4)

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

  • [ruby-actionmailbox]Unknown

    Source package: [rails]

    Details (4)

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

  • [ruby-actionmailer]Unknown

    Source package: [rails]

    Details (4)

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

  • [ruby-actionpack]Unknown

    Source package: [rails]

    Details (4)

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

  • [ruby-actiontext]Unknown

    Source package: [rails]

    Details (4)

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

  • [ruby-actionview]Unknown

    Source package: [rails]

    Details (4)

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

  • [ruby-activejob]Unknown

    Source package: [rails]

    Details (4)

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

  • [ruby-activemodel]Unknown

    Source package: [rails]

    Details (4)

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

  • [ruby-activerecord]Unknown

    Source package: [rails]

    Details (4)

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

  • [ruby-activestorage]Unknown

    Source package: [rails]

    Details (4)

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

  • [ruby-activesupport]Unknown

    Source package: [rails]

    Details (4)

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

  • [ruby-rails]Unknown

    Source package: [rails]

    Details (4)

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

  • [ruby-railties]Unknown

    Source package: [rails]

    Details (4)

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

    • 2:6.1.7.10+dfsg-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · bookworm; dsa · rails · debian · 12

[Debian 13 (Trixie)]

  • [rails]Unknown
    Details (5)

    • 2:7.2.2.2+dfsg-2~deb13u1 · all · trixie

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

    • 2:7.2.2.2+dfsg-2~deb13u1 · all · trixie

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

    • 2:7.2.2.2+dfsg-2~deb13u1 · all · trixie-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

    • 2:7.2.2.2+dfsg-2~deb13u1 · all · trixie-security · Historical version

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

    • 2:7.2.2.2+dfsg-2~deb13u2 · all · trixie-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

  • [ruby-actioncable]Unknown

    Source package: [rails]

    Details (5)

    • 2:7.2.2.2+dfsg-2~deb13u1 · all · trixie

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

    • 2:7.2.2.2+dfsg-2~deb13u1 · all · trixie

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

    • 2:7.2.2.2+dfsg-2~deb13u1 · all · trixie-security · Historical version

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

    • 2:7.2.2.2+dfsg-2~deb13u1 · all · trixie-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

    • 2:7.2.2.2+dfsg-2~deb13u2 · all · trixie-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

  • [ruby-actionmailbox]Unknown

    Source package: [rails]

    Details (5)

    • 2:7.2.2.2+dfsg-2~deb13u1 · all · trixie

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

    • 2:7.2.2.2+dfsg-2~deb13u1 · all · trixie

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

    • 2:7.2.2.2+dfsg-2~deb13u1 · all · trixie-security · Historical version

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

    • 2:7.2.2.2+dfsg-2~deb13u1 · all · trixie-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

    • 2:7.2.2.2+dfsg-2~deb13u2 · all · trixie-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

  • [ruby-actionmailer]Unknown

    Source package: [rails]

    Details (5)

    • 2:7.2.2.2+dfsg-2~deb13u1 · all · trixie

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

    • 2:7.2.2.2+dfsg-2~deb13u1 · all · trixie

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

    • 2:7.2.2.2+dfsg-2~deb13u1 · all · trixie-security · Historical version

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

    • 2:7.2.2.2+dfsg-2~deb13u1 · all · trixie-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

    • 2:7.2.2.2+dfsg-2~deb13u2 · all · trixie-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

  • [ruby-actionpack]Unknown

    Source package: [rails]

    Details (5)

    • 2:7.2.2.2+dfsg-2~deb13u1 · all · trixie

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

    • 2:7.2.2.2+dfsg-2~deb13u1 · all · trixie

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

    • 2:7.2.2.2+dfsg-2~deb13u1 · all · trixie-security · Historical version

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

    • 2:7.2.2.2+dfsg-2~deb13u1 · all · trixie-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

    • 2:7.2.2.2+dfsg-2~deb13u2 · all · trixie-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

  • [ruby-actiontext]Unknown

    Source package: [rails]

    Details (5)

    • 2:7.2.2.2+dfsg-2~deb13u1 · all · trixie

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

    • 2:7.2.2.2+dfsg-2~deb13u1 · all · trixie

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

    • 2:7.2.2.2+dfsg-2~deb13u1 · all · trixie-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

    • 2:7.2.2.2+dfsg-2~deb13u1 · all · trixie-security · Historical version

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

    • 2:7.2.2.2+dfsg-2~deb13u2 · all · trixie-security

      Fixed · Fixed: 2:4.2.5.2-1

      dsa · rails · debian · 13

Next results

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]