Skip to content
OpenAdvisories
Unscored RHSA-2014:0876 1 CVE

Red Hat Security Advisory: ruby193-rubygem-activerecord security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 1 rhel_software_collections:1::el6 ruby193-rubygem-activerecord 1:3.2.8-8.2.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 ruby193-rubygem-activerecord-doc 1:3.2.8-8.2.el6
Red Hat · RHEL 1 rhel_software_collections:1::el7 ruby193-rubygem-activerecord 1:3.2.8-8.2.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 ruby193-rubygem-activerecord-doc 1:3.2.8-8.2.el7

Vulnerabilities 1

  • High —
    CVE-2014-3482

    SQL Injection in Active Record

    SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql_adapter.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 2.x and 3.x before 3.2.19 allows remote attackers to execute arbitrary SQL commands by leverag…

    rails activerecord Debian RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1114425
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0876.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3482
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3482
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3482