mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2025-01-12 07:27:57 +00:00
Code Issues Releases Activity

- Update to 0.9.14 to fix CVE-2013-1756

Browse Source 
Security:	aa7764af-0b5e-4ddc-bc65-38ad697a484f
This commit is contained in:
Steve Wills 2013-02-28 01:46:41 +00:00
parent c9a0e50030
commit ea9f3c8d6f
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=313076
3 changed files with 38 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
graphics/rubygem-dragonfly/Makefile
View File

@ -1,18 +1,17 @@
# Ports collection makefile for: rubygem-dragonfly
# Date created: 13 January 2011
# Whom: Jason Helfman <jhelfman@experts-exchange.com>
#
# Created by: Jason Helfman <jhelfman@experts-exchange.com>
# $FreeBSD$
PORTNAME= dragonfly
PORTVERSION= 0.9.12
PORTVERSION= 0.9.14
CATEGORIES= graphics rubygems
MASTER_SITES= RG
MAINTAINER= ruby@FreeBSD.org
COMMENT= On-the-fly Rack-based image handling framework
RUN_DEPENDS+= rubygem-rack>=0:${PORTSDIR}/www/rubygem-rack
RUN_DEPENDS+= rubygem-rack>=0:${PORTSDIR}/www/rubygem-rack \
rubygem-multi_json>=1.0:${PORTSDIR}/devel/rubygem-multi_json
USE_RUBY= yes
USE_RUBYGEMS= yes

4
graphics/rubygem-dragonfly/distinfo
View File

@ -1,2 +1,2 @@
SHA256 (rubygem/dragonfly-0.9.12.gem) = 52c3beec7e9be7560158b1a31126966a28b4ed74141caaef5d550936d6cf4851
SIZE (rubygem/dragonfly-0.9.12.gem) = 444416
SHA256 (rubygem/dragonfly-0.9.14.gem) = 6b364299b25aee6f5928dc6cb13677f27c892b0a090dc0a5b6d7ac465dfa1234
SIZE (rubygem/dragonfly-0.9.14.gem) = 446976

31
security/vuxml/vuln.xml
View File

@ -51,6 +51,37 @@ Note: Please add new entries to the beginning of this file.
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
<vuln vid="aa7764af-0b5e-4ddc-bc65-38ad697a484f">
<topic>rubygem-dragonfly -- arbitrary code execution</topic>
<affects>
<package>
<name>rubygem18-dragonfly</name>
<name>rubygem19-dragonfly</name>
<name>rubygem20-dragonfly</name>
<range><lt>0.9.14</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>Mark Evans reports:</p>
<blockquote cite="https://groups.google.com/forum/?fromgroups=#!topic/dragonfly-users/3c3WIU3VQTo">
<p>Unfortunately there is a security vulnerability in Dragonfly when
used with Rails which would potentially allow an attacker to run
arbitrary code on a host machine using carefully crafted
requests.
</p>
</blockquote>
</body>
</description>
<references>
<cvename>CVE-2013-1756</cvename>
</references>
<dates>
<discovery>2013-02-19</discovery>
<entry>2013-02-28</entry>
</dates>
</vuln>
<vuln vid="dbdac023-80e1-11e2-9a29-001060e06fd4">
<topic>linux-flashplugin -- multiple vulnerabilities</topic>
<affects>