Skip to content
OpenAdvisories
Medium RHSA-2016:1857 1 CVE

Red Hat Security Advisory: ror40-rubygem-actionpack security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 2 rhel_software_collections:2::el6 ror40-rubygem-actionpack 1:4.0.2-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 ror40-rubygem-actionpack-doc 1:4.0.2-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el7 ror40-rubygem-actionpack 1:4.0.2-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 ror40-rubygem-actionpack-doc 1:4.0.2-8.el7

Vulnerabilities 1

  • Medium 6.1
    CVE-2016-6316

    actionview Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in Action View in Ruby on Rails 3.x before 3.2.22.3, 4.x before 4.2.7.1, and 5.x before 5.0.0.1 might allow remote attackers to inject arbitrary web script or HTML via text declared as "HTML safe" and used as attribute…

    rails actionview Debian RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1365008
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1857.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-6316
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-6316
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-6316
  • article
    https://groups.google.com/forum/#!msg/rubyonrails-security/I-VWr034ouk/gGu2FrCwDAAJ