From owner-svn-ports-head@FreeBSD.ORG Tue Dec 10 19:45:13 2013 Return-Path: Delivered-To: svn-ports-head@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 4A20BB6E; Tue, 10 Dec 2013 19:45:13 +0000 (UTC) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 35FC119DD; Tue, 10 Dec 2013 19:45:13 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.7/8.14.7) with ESMTP id rBAJjDbD089288; Tue, 10 Dec 2013 19:45:13 GMT (envelope-from sunpoet@svn.freebsd.org) Received: (from sunpoet@localhost) by svn.freebsd.org (8.14.7/8.14.7/Submit) id rBAJjCu6089287; Tue, 10 Dec 2013 19:45:12 GMT (envelope-from sunpoet@svn.freebsd.org) Message-Id: <201312101945.rBAJjCu6089287@svn.freebsd.org> From: Sunpoet Po-Chuan Hsieh Date: Tue, 10 Dec 2013 19:45:12 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r336101 - head/security/vuxml X-SVN-Group: ports-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-head@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SVN commit messages for the ports tree for head List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Dec 2013 19:45:13 -0000 Author: sunpoet Date: Tue Dec 10 19:45:12 2013 New Revision: 336101 URL: http://svnweb.freebsd.org/changeset/ports/336101 Log: - Group affected packages - Sort CVE - Fix indent Notified by: remko Modified: head/security/vuxml/vuln.xml Modified: head/security/vuxml/vuln.xml ============================================================================== --- head/security/vuxml/vuln.xml Tue Dec 10 19:42:51 2013 (r336100) +++ head/security/vuxml/vuln.xml Tue Dec 10 19:45:12 2013 (r336101) @@ -102,44 +102,20 @@ Note: Please add new entries to the beg rubygem-actionmailer - 3.2.16 - - rubygem-actionpack - 3.2.16 - - - rubygem-actionpack4 - 4.0.2 - - rubygem-activemodel - 3.2.16 - - rubygem-activerecord - 3.2.16 - - rubygem-activeresource - 3.2.16 - - rubygem-activesupport + rubygem-rails + rubygem-railties 3.2.16 + rubygem-actionpack4 rubygem-activesupport4 4.0.2 - - rubygem-rails - 3.2.16 - - - rubygem-railties - 3.2.16 - @@ -147,33 +123,33 @@ Note: Please add new entries to the beg

Rails 3.2.16 and 4.0.2 have been released! These two releases contain important security fixes, so please upgrade - as soon as possible! In order to make upgrading as smooth as - possible, we've only included commits directly related to - each security issue.
+ as soon as possible! In order to make upgrading as smooth as + possible, we've only included commits directly related to + each security issue.

The security fixes in 3.2.16 are:

-
CVE-2013-6417

CVE-2013-4491
-
CVE-2013-6415

CVE-2013-6414
+
CVE-2013-6415
+
CVE-2013-6417

The security fixes in 4.0.2 are:

-
CVE-2013-6417

CVE-2013-4491
-
CVE-2013-6415

CVE-2013-6414
+
CVE-2013-6415

CVE-2013-6416
+
CVE-2013-6417

- CVE-2013-6417 - CVE-2013-4491 - CVE-2013-6415 - CVE-2013-6414 - CVE-2013-6416 + CVE-2013-4491 + CVE-2013-6414 + CVE-2013-6415 + CVE-2013-6416 + CVE-2013-6417 http://weblog.rubyonrails.org/2013/12/3/Rails_3_2_16_and_4_0_2_have_been_released/