pkgsrc-Changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

CVS commit: pkgsrc/www/ruby-http



Module Name:    pkgsrc
Committed By:   taca
Date:           Sat Mar 28 04:32:15 UTC 2015

Modified Files:
        pkgsrc/www/ruby-http: Makefile PLIST distinfo

Log Message:
Update ruby-http to 0.7.3, security fix.

## 0.7.3 (2015-03-24)

* SECURITY FIX: http.rb failed to call the #post_connection_check method
  on SSL connections. This method implements hostname verification, and
  without it http.rb was vulnerable to MitM attacks. The problem was
  corrected by calling #post_connection_check (CVE-2015-1828)


To generate a diff of this commit:
cvs rdiff -u -r1.4 -r1.5 pkgsrc/www/ruby-http/Makefile \
    pkgsrc/www/ruby-http/PLIST pkgsrc/www/ruby-http/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.




Home | Main Index | Thread Index | Old Index