CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

security/rubygem-omniauth1 1.9.2_1

Generalized Rack framework for multiple-provider authentication

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 1.9.2_1
Upstream
up to date
Last update
to 1.9.2_1 · 18c6e18276
Quarterly
2026Q4: 1.9.2_1
WWW
https://github.com/omniauth/omniauth
Links
cgit · VuXML

Unaddressed (1)

The CVE record lists the packaged version 1.9.2_1 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2015-92848.82019-04-26The request phase of the OmniAuth Ruby gem (1.9.1 and earlier) is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing acc…

VuXML only (0)

Listed in VuXML, the packaged version 1.9.2_1 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (7)

Muhammad Moinur Rahman (bofh) · 1.9.2_1
Mk/**ruby.mk: Switch from USE_RUBY=yes to USES=ruby

Switch from Mk/bsd.ruby.mk to Mk/Uses/ruby.mk

Notable changes are.

- Mk/bsd.ruby.mk is moved to Mk/Uses/ruby.mk.
- USE_RUBY=yes is replaced with USES=ruby.
- USE_RUBY_EXTCONF is replaced with USES=ruby:extconf.
- USE_RUBY_RDOC is replaced with USES=ruby:rdoc.
- USE_RUBY_SETUP is replaces with USES=ruby:setup.
- RUBY_NO_BUILD_DEPENDS and RUBY_NO_RUN_DEPENDS are replaced with
  USES=ruby:{build,none,run}.
- RUBY_REQUIRE isn't used anywhere, so removed.
- USES=gem now implies USES=ruby.

This is mainly the work of yasu@ at https://reviews.freebsd.org/D27863

I have just made some cosmetic changes and ran exp-run to test that the
tree is not in a BROKEN state.

Approved by:	portmgr
Differential Revision:	https://reviews.freebsd.org/D37925
18c6e18276
Yasuhiro Kimura (yasu) · 1.9.2_1
*/*: Update dependency

For all ports that isn't compatible with rack 3.x, update dependency
from www/rubygem-rack to www/rubygem-rack22.

PR:		268057
2672229436
Stefan Eßer (se) · 1.9.2
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.9.2
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Po-Chuan Hsieh (sunpoet) · 1.9.2
security/rubygem-omniauth1: Update to 1.9.2

Changes:	https://github.com/omniauth/omniauth/releases
434cdca366
Stefan Eßer (se) · 1.9.1
security/rubygem-omniauth1: Add CPE information

Approved by:	portmgr (blanket)
42bcdd4cb0
Po-Chuan Hsieh (sunpoet) · 1.9.1
security/rubygem-omniauth1: Add rubygem-omniauth1 1.9.1 (copied from rubygem-omniauth)

- Add PORTSCOUT
facecb6d3a