File _patchinfo of Package patchinfo.869

<patchinfo>
  <issue id="775649" tracker="bnc">CVE-2012-3465: rubygem-rails: strip_tags helper incorrenctly handels malformed HTML resulting in XSS flaw</issue>
  <issue id="775653" tracker="bnc">CVE-2012-3464: rubygem-rails: XSS flaws when validating single quote characters</issue>
  <issue id="CVE-2012-3465" tracker="cve" />
  <issue id="CVE-2012-3464" tracker="cve" />
  <category>security</category>
  <rating>moderate</rating>
  <packager>darix</packager>
  <description>
- added 3-0-escape_html-activesupport.patch: (bnc#775653)
  Also encode single quote (CVE-2012-3464)

- added 3-0-strip_tags.patch: (bnc#775649)
  Do not mark strip_tags result as html_safe CVE-2012-3465

</description>
  <summary>security update for rubygem-actionpack-2_3, rubygem-activesupport-2_3</summary>
</patchinfo>
openSUSE Build Service is sponsored by