Red Hat Security Advisory: ror40 security update

CVE-2015-7576 — rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller CVE-2015-7577 — rubygem-activerecord: Nested attributes rejection proc bypass in Active Record CVE-2015-7581 — rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack CVE-2016-0751 — rubygem-actionpack: possible object leak and denial of service attack in Action Pack CVE-2016-0752 — rubygem-actionpack: directory traversal flaw in Action View CVE-2016-2097 — rubygem-actionpack: directory traversal in Action View, incomplete CVE-2016-0752 fix CVE-2016-2098 — rubygem-actionpack: code injection vulnerability in Action View