| 1 | {"name":"rubygem-cgi_multipart_eof_fix","origin":"www/rubygem-cgi_multipart_eof_fix","version":"2.5.0","comment":"Fix·an·exploitable·bug·in·CGI·multipart·parsing","maintainer":"ruby@FreeBSD.org","www":"http://blog.evanweaver.com/pages/code#cgi_multipart_eof_fix","abi":"FreeBSD:11:*","arch":"freebsd:11:*","prefix":"/usr/local","flatsize":737680,"licenselogic":"or","licenses":["RUBY","GPLv2"],"desc":"Fixes·an·exploitable·bug·in·CGI·multipart·parsing·which·affects·Ruby·<=·1.8.5.\nWhen·multipart·boundary·attributes·contain·non-halting·regular·\nexpression·strings,·the·boundary·searcher·in·the·CGI·module·does·not·properly·\nescape·the·parameter·and·will·execute·arbitrary·regular·expressions.·\nThis·fix·adds·escaping·for·the·user·data.\n\n····*·Affected·application·servers:·standalone·CGI,·Mongrel,·WEBrick\n····*·Unaffected:·FastCGI,·Ruby·1.8.6·(all·servers)\n····*·Unknown:·mod_ruby\n\nThis·fix·will·not·modify·versions·of·Ruby·greater·than·1.8.5,·and·is·\ncumulative·with·previous·CGI·multipart·vulnerability·fixes.··✂ | 1 | {"name":"rubygem-cgi_multipart_eof_fix","origin":"www/rubygem-cgi_multipart_eof_fix","version":"2.5.0","comment":"Fix·an·exploitable·bug·in·CGI·multipart·parsing","maintainer":"ruby@FreeBSD.org","www":"http://blog.evanweaver.com/pages/code#cgi_multipart_eof_fix","abi":"FreeBSD:11:*","arch":"freebsd:11:*","prefix":"/usr/local","flatsize":737680,"licenselogic":"or","licenses":["RUBY","GPLv2"],"desc":"Fixes·an·exploitable·bug·in·CGI·multipart·parsing·which·affects·Ruby·<=·1.8.5.\nWhen·multipart·boundary·attributes·contain·non-halting·regular·\nexpression·strings,·the·boundary·searcher·in·the·CGI·module·does·not·properly·\nescape·the·parameter·and·will·execute·arbitrary·regular·expressions.·\nThis·fix·adds·escaping·for·the·user·data.\n\n····*·Affected·application·servers:·standalone·CGI,·Mongrel,·WEBrick\n····*·Unaffected:·FastCGI,·Ruby·1.8.6·(all·servers)\n····*·Unknown:·mod_ruby\n\nThis·fix·will·not·modify·versions·of·Ruby·greater·than·1.8.5,·and·is·\ncumulative·with·previous·CGI·multipart·vulnerability·fixes.··✂ |