Skip to content
OpenAdvisories
Unscored RHSA-2014:0877 1 CVE

Red Hat Security Advisory: ror40-rubygem-activerecord security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 1 rhel_software_collections:1::el6 ror40-rubygem-activerecord 1:4.0.2-2.2.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 ror40-rubygem-activerecord-doc 1:4.0.2-2.2.el6
Red Hat · RHEL 1 rhel_software_collections:1::el7 ror40-rubygem-activerecord 1:4.0.2-2.2.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 ror40-rubygem-activerecord-doc 1:4.0.2-2.2.el7

Vulnerabilities 1

  • High —
    CVE-2014-3483

    Active Record contains SQL Injection via improper range quoting

    SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/quoting.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 4.x before 4.0.7 and 4.1.x before 4.1.3 allows remote attackers to execute arbitrary SQL comma…

    rails activerecord Debian RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1114427
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0877.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3483
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3483
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3483