svn commit: r537620 - head/security/vuxml
Sunpoet Po-Chuan Hsieh
sunpoet at FreeBSD.org
Wed Jun 3 16:46:06 UTC 2020
Author: sunpoet
Date: Wed Jun 3 16:46:05 2020
New Revision: 537620
URL: https://svnweb.freebsd.org/changeset/ports/537620
Log:
Document rubygem-websocket-extensions vulnerability
Modified:
head/security/vuxml/vuln.xml
Modified: head/security/vuxml/vuln.xml
==============================================================================
--- head/security/vuxml/vuln.xml Wed Jun 3 16:44:57 2020 (r537619)
+++ head/security/vuxml/vuln.xml Wed Jun 3 16:46:05 2020 (r537620)
@@ -58,6 +58,33 @@ Notes:
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="ca8327f7-a5a5-11ea-a860-08002728f74c">
+ <topic>websocket-extensions -- ReDoS vulnerability</topic>
+ <affects>
+ <package>
+ <name>rubygem-websocket-extensions</name>
+ <range><lt>0.1.5</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>Changelog:</p>
+ <blockquote cite="https://github.com/faye/websocket-extensions-ruby/blob/master/CHANGELOG.md#015--2020-06-02">
+ <p>Remove a ReDoS vulnerability in the header parser (CVE-2020-7663)</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <url>https://github.com/faye/websocket-extensions-ruby/blob/master/CHANGELOG.md</url>
+ <url>https://github.com/faye/websocket-extensions-ruby/commit/aa156a439da681361ed6f53f1a8131892418838b</url>
+ <cvename>CVE-2020-7663</cvename>
+ </references>
+ <dates>
+ <discovery>2020-06-02</discovery>
+ <entry>2020-06-03</entry>
+ </dates>
+ </vuln>
+
<vuln vid="4bb56d2f-a5b0-11ea-a860-08002728f74c">
<topic>nghttp2 -- DoS vulnerability</topic>
<affects>
More information about the svn-ports-all
mailing list