此 rubygem-actionpack-4_2、rubygem-actionview-4_2、rubygem-activemodel-4_2、rubygem-activerecord-4_2、rubygem-activesupport-4_2 的更新可修正下列問題：

- CVE-2015-7576：Action Controller 中的基本驗證存有定時攻擊弱點 (boo#963329)

- CVE-2016-0752：Action View 中存有目錄遊走和資訊洩漏問題 (boo#963332)

- CVE-2015-7581：透過萬用字元控制器路由導致無限制記憶體增加 DoS (boo#963335)

- CVE-2016-0751：rubygem-actionpack：物件洩漏 DoS (boo#963331)

- CVE-2016-0753：輸入驗證規避 (boo#963334)

- CVE-2015-7577：巢狀屬性拒絕 proc 繞過 (boo#963330)

偵測

openSUSE 安全性更新：rubygem-actionpack-4_2 / rubygem-actionview-4_2 / rubygem-activemodel-4_2 / 等 (openSUSE-2016-159)

high Nessus Plugin ID 88612

找不到變更記錄