pkgsrc-Changes archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
CVS commit: pkgsrc/www/ruby-http
Module Name: pkgsrc
Committed By: taca
Date: Sat Mar 28 04:32:15 UTC 2015
Modified Files:
pkgsrc/www/ruby-http: Makefile PLIST distinfo
Log Message:
Update ruby-http to 0.7.3, security fix.
## 0.7.3 (2015-03-24)
* SECURITY FIX: http.rb failed to call the #post_connection_check method
on SSL connections. This method implements hostname verification, and
without it http.rb was vulnerable to MitM attacks. The problem was
corrected by calling #post_connection_check (CVE-2015-1828)
To generate a diff of this commit:
cvs rdiff -u -r1.4 -r1.5 pkgsrc/www/ruby-http/Makefile \
pkgsrc/www/ruby-http/PLIST pkgsrc/www/ruby-http/distinfo
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Home |
Main Index |
Thread Index |
Old Index