[DRE-maint] Bug#733209: ruby-will-paginate: CVE-2013-6459: XSS vulnerabilities

Salvatore Bonaccorso carnil at debian.org
Fri Dec 27 05:23:38 UTC 2013


Package: ruby-will-paginate
Severity: important
Tags: security upstream fixed-upstream

Hi,

the following vulnerability was published for ruby-will-paginate.

CVE-2013-6459[0]:
XSS vulnerabilities

It is fixed in a new upstream version 3.0.5[1].

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6459
    http://security-tracker.debian.org/tracker/CVE-2013-6459
[1] https://github.com/mislav/will_paginate/releases/tag/v3.0.5

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore



More information about the Pkg-ruby-extras-maintainers mailing list