The remote host is missing an update to rubygem-actionpack announced via advisory FEDORA-2009-9922.

Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update rubygem-actionpack' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2009-9922

Update Information: A vulnerability is found on Ruby on Rails in the escaping code for the form helpers, which also affects the rpms shipped in Fedora Project. Attackers who can inject deliberately malformed unicode strings into the form helpers can defeat the escaping checks and inject arbitrary HTML. This issue has been tagged as CVE-2009-3009. These new rpms will fix this issue. ChangeLog: * Wed Sep 23 2009 Mamoru Tasaka - 2.3.3-2 - Patch for CVE-2009-3009 (bug 520843)

• https://bugzilla.redhat.com/show_bug.cgi?id=520843

---

Updated on 2015-03-25