lp:debian/lenny/rails

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

8. By Ondřej Surý on 2012-01-22

Fix security regression caused by pulling invalid upstream fix
for our version of rails

7. By Ondřej Surý on 2011-08-29

* Fix SQL Injection Vulnerability in Ruby on Rails (CVE-2011-2930)
* Fix parse error in strip_tags vulnerability (CVE-2011-2931)
* Fix response splitting vulnerability (CVE-2011-3186)
* Adopt the package under DRE

6. By Adam Majer on 2009-09-02

Fix XSS vulnerability in the escaping code for the form
helpers in Ruby on Rails. Attackers who can inject deliberately
malformed unicode strings into the form helpers can defeat the
escaping checks and inject arbitrary HTML [CVE-2009-3009]

5. By Adam Majer on 2008-11-18

Some browsers may submit 'text/plain' content type as part of POST
request. ActionController passed these requests through, sidestepping
the CSRF protection given by protect_from_forgery. Patch from
upstream removes 'text/plain' encoding from the "ignore list".

4. By Adam Majer on 2008-10-19

Sanitize the URLs passed to redirect_to to prevent a potential
response splitting attack. Patch from upstream.

3. By Adam Majer on 2007-01-14

Remove the 12_options patch which actually breaks select.
(closes: #406658)

2. By Adam Majer on 2005-03-30

Fixed the Inflector patch

1. By Adam Majer on 2005-03-30

Import upstream version 0.11.1