Skip to content
OpenAdvisories
Unscored RHSA-2014:1102 1 CVE

Red Hat Security Advisory: ror40-rubygem-activerecord security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 1 rhel_software_collections:1::el6 ror40-rubygem-activerecord 1:4.0.2-2.3.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 ror40-rubygem-activerecord-doc 1:4.0.2-2.3.el6
Red Hat · RHEL 1 rhel_software_collections:1::el7 ror40-rubygem-activerecord 1:4.0.2-2.3.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 ror40-rubygem-activerecord-doc 1:4.0.2-2.3.el7

Vulnerabilities 1

  • High —
    CVE-2014-3514

    Active Record subject to strong parameters protection bypass

    activerecord/lib/active_record/relation/query_methods.rb in Active Record in Ruby on Rails 4.0.x before 4.0.9 and 4.1.x before 4.1.5 allows remote attackers to bypass the strong parameters protection mechanism via crafted input to an application that makes cr…

    rails activerecord Debian RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1131240
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1102.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3514
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3514
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3514