Skip to content
OpenAdvisories
Unscored DSA-2887-1 1 CVE

ruby-actionmailer-3.2 - security update

Published Mar 27, 2014 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 ruby-actionmailer-3.2 3.2.6-2+deb7u1

Vulnerabilities 1

  • Medium —
    CVE-2013-4389

    actionmailer email address processing causes Denial of service

    Multiple format string vulnerabilities in log_subscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x before 3.2.15 allow remote attackers to cause a denial of service via a crafted e-mail address that is improperly handled d…

    actionmailer RubyGems