Red Hat Security Advisory: Red Hat OpenShift Enterprise 1.1.1 update

Fixed packages 69

Vulnerabilities 15

• Medium —
  CVE-2012-2660

  Action Pack contains database-query restrictions bypass

  actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows rem…

  actionpack RubyGems
  Jun 22, 2012
• Medium —
  CVE-2012-2661 Public exploit

  Active Record vulnerable to SQL Injection via nested query parameters

  The Active Record component in Ruby on Rails 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly implement the passing of request data to a where method in an ActiveRecord class, which allows remote attackers to conduct certain S…

  activerecord RubyGems
  Jun 22, 2012
• Medium —
  CVE-2012-2694

  actionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted request

  actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows rem…

  actionpack RubyGems
  Jun 22, 2012
• High —
  CVE-2012-2695

  activerecord vulnerable to SQL Injection

  The Active Record component in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly implement the passing of request data to a where method in an ActiveRecord class, which allows remote attackers to conduct certain SQL inj…

  activerecord RubyGems
  Jun 22, 2012
• Medium —
  CVE-2012-3424

  actionpack Improper Authentication vulnerability

  The decode_credentials method in actionpack/lib/action_controller/metal/http_authentication.rb in Ruby on Rails 3.x before 3.0.16, 3.1.x before 3.1.7, and 3.2.x before 3.2.7 converts Digest Authentication strings to symbols, which allows remote attackers to c…

  actionpack RubyGems
  Aug 8, 2012
• Medium —
  CVE-2012-3463

  actionpack Cross-site Scripting vulnerability

  Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_tag_helper.rb in Ruby on Rails 3.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the prompt fiel…

  actionpack RubyGems
  Aug 10, 2012
• Medium —
  CVE-2012-3464

  activesupport Cross-site Scripting vulnerability

  Cross-site scripting (XSS) vulnerability in activesupport/lib/active_support/core_ext/string/output_safety.rb in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 might allow remote attackers to inject arbitrary web script or HTML via ve…

  rails activesupport Debian RubyGems
  Aug 10, 2012
• Medium —
  CVE-2012-3465

  actionpack Cross-site Scripting vulnerability

  Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/sanitize_helper.rb in the strip_tags helper in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTM…

  rails actionpack Debian RubyGems
  Aug 10, 2012
• Unscored —
  CVE-2012-4464

  Ruby 1.9.3 before patchlevel 286 and 2.0 before revision r37068 allows context-dependent attackers to bypass safe-level…

  Apr 25, 2013
• Unscored —
  CVE-2012-4466

  Ruby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068 allows context-dependent …

  Apr 25, 2013
• Unscored —
  CVE-2012-4522

  The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows contex…

  Nov 24, 2012
• Unscored —
  CVE-2012-5371

  Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without properly restricting the abil…

  Nov 28, 2012
• Medium —
  CVE-2013-0155

  Active Record allows bypassing of database-query restrictions

  Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended data…

  rails activerecord Debian RubyGems
  Jan 13, 2013
• Low —
  CVE-2013-0162

  ruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name

  The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.

  ruby_parser ruby-parser Ubuntu RubyGems
  Mar 1, 2013
• Medium —
  CVE-2013-0276

  ActiveRecord vulnerable to modification of protected model attributes

  ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the attr_protected protection mechanism and modify protected model attributes via a crafted request.

  rails activerecord Debian RubyGems
  Feb 13, 2013

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/knowledge/docs/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=827353
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=827363
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=831573
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=831581
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=843711
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=847196
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=847199
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=847200
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=862598
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=862614
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=865940
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=875236
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=887353
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=889426
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=892806
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=892866
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=895347
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=895355
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=902412
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=902630
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=903526
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=903546
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=905021
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=905656
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=906227
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=906845
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0582.json
• report
  https://access.redhat.com/security/cve/CVE-2012-2660
• advisory
  https://www.cve.org/CVERecord?id=CVE-2012-2660
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2012-2660
• report
  https://access.redhat.com/security/cve/CVE-2012-2661
• advisory
  https://www.cve.org/CVERecord?id=CVE-2012-2661
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2012-2661
• report
  https://access.redhat.com/security/cve/CVE-2012-2694
• advisory
  https://www.cve.org/CVERecord?id=CVE-2012-2694
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2012-2694
• report
  https://access.redhat.com/security/cve/CVE-2012-2695