FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-23 14:57:51 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
3f6de636-8cdb-11e7-9c71-f0def1fd7ea2	rubygems -- multiple vulnerabilities Official blog of RubyGems reports: The following vulnerabilities have been reported: a DNS request hijacking vulnerability, an ANSI escape sequence vulnerability, a DoS vulnerability in the query command, and a vulnerability in the gem installer that allowed a malicious gem to overwrite arbitrary files. Discovery 2017-08-29 Entry 2017-08-29 ruby22-gems ruby23-gems ruby24-gems < 2.6.13 https://www.ruby-lang.org/en/news/2017/08/29/multiple-vulnerabilities-in-rubygems/

VuXML ID

Description

3f6de636-8cdb-11e7-9c71-f0def1fd7ea2

rubygems -- multiple vulnerabilities

Official blog of RubyGems reports:

The following vulnerabilities have been reported: a DNS request hijacking vulnerability, an ANSI escape sequence vulnerability, a DoS vulnerability in the query command, and a vulnerability in the gem installer that allowed a malicious gem to overwrite arbitrary files.

Discovery 2017-08-29
Entry 2017-08-29
ruby22-gems
ruby23-gems
ruby24-gems

< 2.6.13

https://www.ruby-lang.org/en/news/2017/08/29/multiple-vulnerabilities-in-rubygems/