BSD PortsVulnerable: version 3.6.6 is affected by 10 known vulnerabilities. See below.
www/libsass 3.6.6 NetBSD
C/C++ port of the Sass CSS precompiler
- System
- NetBSD
- Repository
- pkgsrc
- Maintainer
- [email protected]
- License
- mit
- Categories
- www, devel
- Package size
- 1049.9 KiB, 9730.4 KiB installed
Description
LibSass is a C/C++ port of the Sass CSS precompiler. The original version was written in Ruby, but this version is meant for efficiency and portability.
This library strives to be light, simple, and easy to build and integrate with a variety of platforms and languages.
In the other systems
| System | Port | Version |
|---|---|---|
| NetBSD | www/libsass | 3.6.6 |
| FreeBSD | textproc/libsass | 3.6.6 |
| OpenBSD | www/libsass | 3.6.6v0 |
| DragonFly | textproc/libsass | 3.6.6 |
| MidnightBSD | textproc/libsass | 3.6.6 |
| HardenedBSD | textproc/libsass | 3.6.6 |
| GhostBSD | textproc/libsass | 3.6.6 |
Install
Binary package:
pkgin install libsassFrom pkgsrc:
cd /usr/pkgsrc/www/libsass && make install cleanPackages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | Version |
|---|---|
| NetBSD 10.1 x86_64 | 3.6.6 |
| NetBSD 10.1 aarch64 | 3.6.6 |
| SmartOS / illumos x86_64 | 3.6.6 |
| macOS 15 arm64 | 3.6.6 |
Dependencies
Required by 2
Known vulnerabilities 10
- libsass: heap-overflow (CVE-2017-10687)
- libsass: denial-of-service (CVE-2017-11341)
- libsass: denial-of-service (CVE-2017-12963)
- libsass: denial-of-service (CVE-2017-12964)
- libsass: denial-of-service (CVE-2018-19218)
- libsass: denial-of-service (CVE-2018-19219)
- libsass: denial-of-service (CVE-2019-18797)
- libsass: denial-of-service (CVE-2022-26592)
- libsass: denial-of-service (CVE-2022-43357)
- libsass: denial-of-service (CVE-2022-43358)