CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

www/rubygem-sinatra2 2.2.4_1

Classy web development framework in ruby

1
unaddressed
0
VuXML only
0
fixed
0
open problem reports

Port info

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 2.2.4_1
Upstream
up to date
Last update
to 2.2.4_1 · 4175eb71a9
Quarterly
2026Q4: 2.2.4_1
WWW
http://www.sinatrarb.com/
Links
cgit · VuXML

Install

Package
# pkg install rubygem-sinatra2
installs 2.2.4_1 from latest; from quarterly (2026Q4) 2.2.4_1
Port
# cd /usr/ports/www/rubygem-sinatra2 && make install clean
Size
273 KiB download · 1.1 MiB installed
Depends on
devel/ruby-gems 4.0.21, devel/rubygem-mustermann3 3.1.1, devel/rubygem-tilt 2.9.0, lang/ruby34 3.4.9_2,1, www/rubygem-rack-protection2 2.2.4_1, www/rubygem-rack22 2.2.24,3
License
MIT
pkg-message
Shown after installing
Sinatra optionally integrates with haml/sass or Builder
        for templating and mongrel or thin as an HTTP server.
        To use them, install the respective ports separately:

                www/rubygem-haml
                devel/rubygem-builder
                www/rubygem-mongrel
                www/rubygem-thin

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.2.4_12.2.4_1–
FreeBSD 152.2.4_12.2.4_1–
FreeBSD 142.2.4_12.2.4_12.2.4_1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.2.4_12.2.4_1–
FreeBSD 142.2.4_12.2.4_12.2.4_1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (1)

The CVE record lists the packaged version 2.2.4_1 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2025-619212.72025-10-10Sinatra is a domain-specific language for creating web applications in Ruby. In versions prior to 4.2.0, there is a denial of service vulnerability in the `If-Match` and…

VuXML only (0)

Listed in VuXML, the packaged version 2.2.4_1 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (7)

Po-Chuan Hsieh (sunpoet) · 2.2.4_1
www/rubygem-sinatra2: Change RUN_DEPENDS from rubygem-mustermann to rubygem-mustermann3

- Bump PORTREVISION for dependency change
4175eb71a9
Yasuhiro Kimura (yasu) · 2.2.4
devel/ruby-gems: Update to 3.5.6

While here, mark textproc/rubygem-nokogumbo as BROKEN because build
fails with clean latest ports tree and all supported ruby versions.

ChangeLog:	https://github.com/rubygems/rubygems/blob/v3.5.6/CHANGELOG.md
PR:		276884
Approved by:	sunpoet (ruby@, maintainer)
Exp-run by:	antoine
d86e4213df
Po-Chuan Hsieh (sunpoet) · 2.2.4
www/rubygem-sinatra2: Update to 2.2.4

Changes:	https://github.com/sinatra/sinatra/blob/2-2-stable/CHANGELOG.md
f27e26bec6
Yasuhiro Kimura (yasu) · 2.2.2_1
devel/ruby-gems: Update to 3.4.2

ChangeLog:	https://github.com/rubygems/rubygems/releases/tag/v3.4.2
PR:		268578
Approved by:	meta (ruby@, maintainer)
Exp-run by:	antoine
f03ab0f785
Muhammad Moinur Rahman (bofh) · 2.2.2_1
Mk/**ruby.mk: Switch from USE_RUBY=yes to USES=ruby

Switch from Mk/bsd.ruby.mk to Mk/Uses/ruby.mk

Notable changes are.

- Mk/bsd.ruby.mk is moved to Mk/Uses/ruby.mk.
- USE_RUBY=yes is replaced with USES=ruby.
- USE_RUBY_EXTCONF is replaced with USES=ruby:extconf.
- USE_RUBY_RDOC is replaced with USES=ruby:rdoc.
- USE_RUBY_SETUP is replaces with USES=ruby:setup.
- RUBY_NO_BUILD_DEPENDS and RUBY_NO_RUN_DEPENDS are replaced with
  USES=ruby:{build,none,run}.
- RUBY_REQUIRE isn't used anywhere, so removed.
- USES=gem now implies USES=ruby.

This is mainly the work of yasu@ at https://reviews.freebsd.org/D27863

I have just made some cosmetic changes and ran exp-run to test that the
tree is not in a BROKEN state.

Approved by:	portmgr
Differential Revision:	https://reviews.freebsd.org/D37925
18c6e18276
Yasuhiro Kimura (yasu) · 2.2.2_1
*/*: Update dependency

For all ports that isn't compatible with rack 3.x, update dependency
from www/rubygem-rack to www/rubygem-rack22.

PR:		268057
2672229436
Po-Chuan Hsieh (sunpoet) · 2.2.2
www/rubygem-sinatra2: Add rubygem-sinatra2 2.2.2 (copied from rubygem-sinatra)

- Change RUN_DEPENDS from rubygem-rack-protection to rubygem-rack-protection2
- Add PORTSCOUT
c6ae153176