[DRE-maint] Bug#733209: ruby-will-paginate: CVE-2013-6459: XSS vulnerabilities
Salvatore Bonaccorso
carnil at debian.org
Fri Dec 27 05:23:38 UTC 2013
Package: ruby-will-paginate
Severity: important
Tags: security upstream fixed-upstream
Hi,
the following vulnerability was published for ruby-will-paginate.
CVE-2013-6459[0]:
XSS vulnerabilities
It is fixed in a new upstream version 3.0.5[1].
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6459
http://security-tracker.debian.org/tracker/CVE-2013-6459
[1] https://github.com/mislav/will_paginate/releases/tag/v3.0.5
Please adjust the affected versions in the BTS as needed.
Regards,
Salvatore
More information about the Pkg-ruby-extras-maintainers
mailing list