Bug#558685: Bug#564142: RM: rails/2.2.3-1

2010-01-30 Thread Adam Majer
retitle 558685 rails: [CVE-2009-4214] Cross-site scripting (XSS) vulnerability in the strip_tags thanks Only CVE-2009-4214 is applicable. CVE-2008-7248 was fixed in 2.1.0-6. Sid is not affected by this. - Adam -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a su

Bug#558685: Bug#564142: RM: rails/2.2.3-1

2010-01-30 Thread Adam Majer
On Sat, Jan 30, 2010 at 09:47:30AM -0800, Ryan Niebur wrote: > On Fri, Jan 08, 2010 at 12:13:36AM +0100, Moritz Muehlenhoff wrote: > > Package: release.debian.org > > Severity: normal > > User: release.debian@packages.debian.org > > Usertags: rm > > > > Please remove rails. It has open securit

Bug#558685: Bug#564142: RM: rails/2.2.3-1

2010-01-30 Thread Ryan Niebur
On Fri, Jan 08, 2010 at 12:13:36AM +0100, Moritz Muehlenhoff wrote: > Package: release.debian.org > Severity: normal > User: release.debian@packages.debian.org > Usertags: rm > > Please remove rails. It has open security issues, which haven't been > acknowledged for six weeks. > I'll work on