cpet/freebsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Document Rails vulnerability

Browse Source
This commit is contained in:
Sunpoet Po-Chuan Hsieh 2019-03-18 18:25:00 +00:00
parent 598092212c
commit 77efde71a7
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=496197
1 changed files with 37 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
security/vuxml/vuln.xml
View File

@ -58,6 +58,43 @@ Notes:
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
<vuln vid="1396a74a-4997-11e9-b5f1-83edb3f89ba1">
<topic>Rails -- Action View vulnerabilities</topic>
<affects>
<package>
<name>rubygem-actionview4</name>
<range><lt>4.2.11.1</lt></range>
</package>
<package>
<name>rubygem-actionview50</name>
<range><lt>5.0.7.2</lt></range>
</package>
<package>
<name>rubygem-actionview5</name>
<range><lt>5.1.6.2</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>Ruby on Rails blog:</p>
<blockquote cite="https://weblog.rubyonrails.org/2019/3/13/Rails-4-2-5-1-5-1-6-2-have-been-released/">
<p>Rails 4.2.11.1, 5.0.7.2, 5.1.6.2, 5.2.2.1, and 6.0.0.beta3 have been released! These contain the following important security fixes. It is recommended that users upgrade as soon as possible:</p>
<p>CVE-2019-5418 File Content Disclosure in Action View</p>
<p>CVE-2019-5419 Denial of Service Vulnerability in Action View</p>
</blockquote>
</body>
</description>
<references>
<url>https://weblog.rubyonrails.org/2019/3/13/Rails-4-2-5-1-5-1-6-2-have-been-released/</url>
<cvename>CVE-2019-5418</cvename>
<cvename>CVE-2019-5419</cvename>
</references>
<dates>
<discovery>2019-03-13</discovery>
<entry>2019-03-18</entry>
</dates>
</vuln>
<vuln vid="46e1ece5-48bd-11e9-9c40-080027ac955c">
<topic>PuTTY -- security fixes in new release</topic>
<affects>