Ubuntu
ruby-actionpack-3.2 package

  1. Raring (13.04)
  2. Bug #1100188
  3. Comment #0

Comment 0 for bug 1100188

Revision history for this message
Christian Kuersteiner (ckuerste) wrote :

There is a vulnerability when Active Record is used in conjunction with JSON parameter parsing.

Versions Affected: 3.x series
Not affected: 2.x series

See also: http://www.openwall.com/lists/oss-security/2013/01/08/13