Author: nion Date: 2012-08-12 13:12:27 +0000 (Sun, 12 Aug 2012) New Revision: 19929 Modified: data/CVE/list Log: CVE-2012-346{3,4,5} fixed in ruby-actionpack-3.2 3.2.6-4 Modified: data/CVE/list ==================================================================--- data/CVE/list 2012-08-10 21:14:19 UTC (rev 19928) +++ data/CVE/list 2012-08-12 13:12:27 UTC (rev 19929) @@ -1643,15 +1643,15 @@ - gnome-keyring <unfixed> (bug #683655) CVE-2012-3465 (Cross-site scripting (XSS) vulnerability in ...) - rails <removed> (low) - - ruby-actionpack-3.2 <unfixed> (bug #684454) + - ruby-actionpack-3.2 3.2.6-4 (bug #684454) NOTE: http://www.openwall.com/lists/oss-security/2012/08/09/9 CVE-2012-3464 (Cross-site scripting (XSS) vulnerability in ...) - rails <removed> (low) - - ruby-actionpack-3.2 <unfixed> (bug #684454) + - ruby-actionpack-3.2 3.2.6-4 (bug #684454) NOTE: http://www.openwall.com/lists/oss-security/2012/08/09/10 CVE-2012-3463 (Cross-site scripting (XSS) vulnerability in ...) - rails <not-affected> (Only affects RoR 3.x) - - ruby-actionpack-3.2 <unfixed> (bug #684454) + - ruby-actionpack-3.2 3.2.6-4 (bug #684454) NOTE: http://www.openwall.com/lists/oss-security/2012/08/09/8 CVE-2012-3462 RESERVED