title: Red Hat Security Advisory: rh-ror41 security update
description: rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller rubygem-activerecord: Nested attributes rejection proc bypass in Active Record rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack rubygem-actionpack: possible object leak and denial of service attack in Action Pack rubygem-actionpack: directory traversal flaw in Action View rubygem-activerecord: possible input validation circumvention in Active Model
cpes: cpe:/a:redhat:rhel_software_collections:2::el6 cpe:/a:redhat:rhel_software_collections:2::el7