Debian LTS Advisory ([SECURITY] [DLA 1739-1] rails security update)

The remote host is missing an update for the 'rails' package(s) announced via the DSA-1739-1 advisory.

John Hawthorn of Github discovered a file content disclosure vulnerability in Rails, a ruby based web application framework. Specially crafted accept headers in combination with calls to `render file:` can cause arbitrary files on the target server to be rendered, disclosing the file contents. This vulnerability could also be exploited for a denial-of-service attack.

'rails' package(s) on Debian Linux.

Checks if a vulnerable package version is present on the target host.

For Debian 8 'Jessie', these problems have been fixed in version 2:4.1.8-1+deb8u5. We recommend that you upgrade your rails packages.