LWN.net Logo

Not logged in

Log in now

Create an account

Subscribe to LWN

Recent Features

LWN.net Weekly Edition for May 23, 2013

An "enum" for Python 3

An unexpected perf feature

LWN.net Weekly Edition for May 16, 2013

A look at the PyPy 2.0 release

Printable page
Weekly edition Kernel Security Distributions Contact Us Search
Archives Calendar Subscribe Write for LWN LWN.net FAQ Sponsors

rubygem-actionpack: denial of service

Package(s):rubygem-actionpack CVE #(s):CVE-2012-3424
Created:August 10, 2012 Updated:August 15, 2012
Description:

From the Red Hat advisory:

DoS Vulnerability in authenticate_or_request_with_http_digest

There is a DoS vulnerability in Action Pack digest authentication handling in Rails.

Alerts:
Fedora FEDORA-2012-11353 2012-08-09
Fedora FEDORA-2012-11363 2012-08-09
openSUSE openSUSE-SU-2012:1066-1 2012-08-30
Red Hat RHSA-2013:0582-01 2013-02-28
(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds