Date: Tue, 29 Aug 2017 18:19:34 +0000 (UTC) From: Joseph Mingrone <jrm@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r448934 - head/security/vuxml Message-ID: <201708291819.v7TIJYjl064709@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: jrm Date: Tue Aug 29 18:19:33 2017 New Revision: 448934 URL: https://svnweb.freebsd.org/changeset/ports/448934 Log: security/vuxml: Add entry for multiple rubygems vulnerabilities reported 2017-08-29 at https://www.ruby-lang.org/en/news/2017/08/29/multiple-vulnerabilities-in-rubygems/ Approved by: swills Modified: head/security/vuxml/vuln.xml Modified: head/security/vuxml/vuln.xml ============================================================================== --- head/security/vuxml/vuln.xml Tue Aug 29 17:26:02 2017 (r448933) +++ head/security/vuxml/vuln.xml Tue Aug 29 18:19:33 2017 (r448934) @@ -58,6 +58,37 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">; + <vuln vid="3f6de636-8cdb-11e7-9c71-f0def1fd7ea2"> + <topic>rubygems -- multiple vulnerabilities</topic> + <affects> + <package> + <name>ruby22-gems</name> + <name>ruby23-gems</name> + <name>ruby24-gems</name> + <range><lt>2.6.13</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>Official blog of RubyGems reports:</p> + <blockquote cite="https://www.ruby-lang.org/en/news/2017/08/29/multiple-vulnerabilities-in-rubygems/">; + <p>The following vulnerabilities have been reported: a DNS request + hijacking vulnerability, an ANSI escape sequence vulnerability, a DoS + vulnerability in the query command, and a vulnerability in the gem + installer that allowed a malicious gem to overwrite arbitrary + files.</p> + </blockquote> + </body> + </description> + <references> + <url>https://www.ruby-lang.org/en/news/2017/08/29/multiple-vulnerabilities-in-rubygems/</url>; + </references> + <dates> + <discovery>2017-08-29</discovery> + <entry>2017-08-29</entry> + </dates> + </vuln> + <vuln vid="7d7e05fb-64da-435a-84fb-4061493b89b9"> <topic>kanboard -- multiple privilege escalation vulnerabilities</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201708291819.v7TIJYjl064709>