Package: ruby-passenger
Severity: grave
Tags: security
Justification: user security hole
Please see https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2119
for details and fixes.
This doesn't warrant a a DSA, but can be fixed through a point update.
Cheers,
Moritz