Attachment 157891 Details for Bug 200979 – Document devel/rubygem-papercut security advisory

[patch] Document devel/rubygem-papercut security advisory

papercut_vuxml.diff (text/plain), 1.88 KB, created by Jason Unovitch on 2015-06-20 01:16:57 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jason Unovitch

Created: 2015-06-20 01:16:57 UTC

Size: 1.88 KB

patch

obsolete

>Index: vuln.xml
>===================================================================
>--- vuln.xml	(revision 390101)
>+++ vuln.xml	(working copy)
>@@ -57,6 +57,42 @@
> 
> -->
> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
>+ <vuln vid="0f154810-16e4-11e5-a1cf-002590263bf5">
>+ <topic>rubygem-paperclip -- Fix a possible security issue with spoofing</topic>
>+ <affects>
>+ <package>
>+	<name>rubygem-paperclip</name>
>+	<range><lt>4.2.2</lt></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	Jon Yurek reports:
>+	<blockquote cite="https://github.com/thoughtbot/paperclip/commit/9aee4112f36058cd28d5fe4a006d6981bd1eda57">
>+	 Thanks to MORI Shingo of DeNA Co., Ltd. for reporting this.
>+	 There is an issue where if an HTML file is uploaded with a .html
>+	 extension, but the content type is listed as being `image/jpeg`,
>+	 this will bypass a validation checking for images. But it will also
>+	 pass the spoof check, because a file named .html and containing
>+	 actual HTML passes the spoof check.
>+	 This change makes it so that we also check the supplied content
>+	 type. So even if the file contains HTML and ends with .html, it
>+	 doesn't match the content type of `image/jpeg` and so it fails.
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <cvename>CVE-2015-2963</cvename>
>+ <url>https://github.com/thoughtbot/paperclip/commit/9aee4112f36058cd28d5fe4a006d6981bd1eda57</url>
>+ <url>https://robots.thoughtbot.com/paperclip-security-release</url>
>+ <url>http://jvn.jp/en/jp/JVN83881261/index.html</url>
>+ </references>
>+ <dates>
>+ <discovery>2015-06-05</discovery>
>+ <entry>2015-06-20</entry>
>+ </dates>
>+ </vuln>
>+
> <vuln vid="d605edb1-1616-11e5-a000-d050996490d0">
> <topic>drupal -- multiple vulnerabilities</topic>
> <affects>

Actions: View | Diff

Attachments on bug 200979: 157891