cpet/freebsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Document rubygem-websocket-extensions vulnerability

Browse Source
This commit is contained in:
Sunpoet Po-Chuan Hsieh 2020-06-03 16:46:05 +00:00
parent 45a22c6622
commit 33e46e6eff
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=537620
1 changed files with 27 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
security/vuxml/vuln.xml
View File

@ -58,6 +58,33 @@ Notes:
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
<vuln vid="ca8327f7-a5a5-11ea-a860-08002728f74c">
<topic>websocket-extensions -- ReDoS vulnerability</topic>
<affects>
<package>
<name>rubygem-websocket-extensions</name>
<range><lt>0.1.5</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>Changelog:</p>
<blockquote cite="https://github.com/faye/websocket-extensions-ruby/blob/master/CHANGELOG.md#015--2020-06-02">
<p>Remove a ReDoS vulnerability in the header parser (CVE-2020-7663)</p>
</blockquote>
</body>
</description>
<references>
<url>https://github.com/faye/websocket-extensions-ruby/blob/master/CHANGELOG.md</url>
<url>https://github.com/faye/websocket-extensions-ruby/commit/aa156a439da681361ed6f53f1a8131892418838b</url>
<cvename>CVE-2020-7663</cvename>
</references>
<dates>
<discovery>2020-06-02</discovery>
<entry>2020-06-03</entry>
</dates>
</vuln>
<vuln vid="4bb56d2f-a5b0-11ea-a860-08002728f74c">
<topic>nghttp2 -- DoS vulnerability</topic>
<affects>