Skip to content

Commit

Permalink
v1.0.4 with CVE-2014-* but CVE-2014-0080 check backport
Browse files Browse the repository at this point in the history
  • Loading branch information
thesp0nge committed Mar 14, 2014
1 parent bbcaf0d commit ba928f6
Show file tree
Hide file tree
Showing 2 changed files with 10 additions and 10 deletions.
4 changes: 2 additions & 2 deletions KnowledgeBase.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Codesake::Dawn Knowledge base

The knowledge base library for Codesake::Dawn version 1.0.3 contains 152 security checks.
The knowledge base library for Codesake::Dawn version 1.0.4 contains 152 security checks.
---
* Not revised code: Analyzing comments, it seems your code is waiting from some review from you. Please consider take action before putting it in production.
This check will analyze the source code looking for the following patterns: XXX, TO_CHECK, CHECKME, CHECK and FIXME
Expand Down Expand Up @@ -165,4 +165,4 @@ XML documents with carefully crafted entity expansion strings which can cause th
* [CVE-2014-0082](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0082): actionpack/lib/action_view/template/text.rb in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME type strings to symbols during use of the :text option to the render method, which allows remote attackers to cause a denial of service (memory consumption) by including these strings in headers.


_Last updated: Fri 14 Mar 08:19:09 CET 2014_
_Last updated: Fri 14 Mar 08:36:40 CET 2014_
16 changes: 8 additions & 8 deletions lib/codesake/dawn/version.rb
Original file line number Diff line number Diff line change
Expand Up @@ -9,17 +9,17 @@ module Dawn
#
# Future releases
#
# "Tow Mater"
# "Finn McMissile"
# "Fillmore"
# "Holly Shiftwell"
# "Guido"
# "Luigi"
# "Tow Mater"
# "Finn McMissile"
# "Fillmore"
# "Holly Shiftwell"
# "Guido"
# "Luigi"

VERSION = "1.0.3"
VERSION = "1.0.4"
CODENAME = "Lightning McQueen"
# RELEASE = "(development)"
RELEASE = "20140213"
RELEASE = "20140314"

end
end

0 comments on commit ba928f6

Please sign in to comment.