BSD Portssecurity/rubygem-omniauth-rails_csrf_protection 1.0.2 FreeBSD
Mitigation against CVE-2015-9284 for OmniAuth
- System
- FreeBSD
- Repository
- FreeBSD ports
- Maintainer
- [email protected]
- License
- MIT
- Categories
- security, rubygems
- Package size
- 5.6 KiB, 10.5 KiB installed
Description
This gem provides a mitigation against CVE-2015-9284 (Cross-Site Request Forgery on the request phrase when using OmniAuth gem with a Ruby on Rails application) by implementing a CSRF token verifier that directly utilize `ActionController::RequestForgeryProtection` code from Rails.
In the other systems
| System | Port | Version |
|---|---|---|
| FreeBSD | security/rubygem-omniauth-rails_csrf_protection | 1.0.2 |
| DragonFly | security/rubygem-omniauth-rails_csrf_protection | 1.0.2 |
| HardenedBSD | security/rubygem-omniauth-rails_csrf_protection | 1.0.2 |
| GhostBSD | security/rubygem-omniauth-rails_csrf_protection | 1.0.2 |
Install
Binary package:
pkg install rubygem-omniauth-rails_csrf_protectionFrom the ports tree:
cd /usr/ports/security/rubygem-omniauth-rails_csrf_protection/ && make install cleanTo depend on this port in another port's Makefile:
RUN_DEPENDS= rubygem-omniauth-rails_csrf_protection>0:security/rubygem-omniauth-rails_csrf_protectionPackages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | aarch64 | amd64 | armv6 | armv7 | i386 |
|---|---|---|---|---|---|
| FreeBSD:14:latest | 1.0.2 | 1.0.2 | 1.0.1 | - | 1.0.2 |
| FreeBSD:14:quarterly | 1.0.2 | 1.0.2 | n/a | - | 1.0.2 |
| FreeBSD:15:latest | 1.0.2 | 1.0.2 | n/a | - | 1.0.2 |
| FreeBSD:15:quarterly | 1.0.2 | 1.0.2 | n/a | n/a | n/a |
| FreeBSD:16:latest | 1.0.2 | 1.0.2 | n/a | n/a | n/a |
| FreeBSD:16:quarterly | n/a | n/a | n/a | n/a | n/a |
Dependencies
As this port's Makefile names them.
Runtime 2
rubygem-actionpack70>=4.2: www/rubygem-actionpack70rubygem-omniauth>=2.0<3: security/rubygem-omniauth
The full lists below include those, and their dependencies in turn.
Build dependencies 6
Run dependencies 40
- benchmarks/rubygem-benchmark
- converters/rubygem-base64
- devel/gettext-runtime
- devel/libffi
- devel/libunwind
- devel/readline
- devel/ruby-gems
- devel/rubygem-actionview70
- devel/rubygem-activesupport70
- devel/rubygem-builder
- devel/rubygem-concurrent-ruby
- devel/rubygem-drb
- devel/rubygem-hashie
- devel/rubygem-i18n
- devel/rubygem-logger
- devel/rubygem-minitest
- devel/rubygem-mutex_m
- devel/rubygem-racc
- devel/rubygem-tzinfo
- lang/ruby34
- math/rubygem-bigdecimal
- print/indexinfo
- security/libgcrypt
- security/libgpg-error
- security/rubygem-omniauth
- security/rubygem-securerandom
- textproc/libxml2
- textproc/libxslt
- textproc/libyaml
- textproc/rubygem-loofah
- textproc/rubygem-nokogiri
- textproc/rubygem-rails-dom-testing-rails70
- textproc/rubygem-rails-html-sanitizer
- www/rubygem-actionpack70
- www/rubygem-crass
- www/rubygem-erubi
- www/rubygem-rack
- www/rubygem-rack-protection3
- www/rubygem-rack-test
- www/rubygem-rack22
No port depends on this one.
Configuration
No options to configure.
- USES
- gem
- Service scripts
- none
Files
distinfo 1
| File | Size | SHA256 |
|---|---|---|
| rubygem/omniauth-rails_csrf_protection-1.0.2.gem | 8192 | 1170fd672aff092b9b7ebebc1453559f073ed001e3ce62a1df616e32f8dc5fe0 |
Master sites 1
- RG
Commit history 0
No commits in the history this site was built from.