omniauth-facebook 2.0.0.pre1 → 2.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 2ebd19468f518b73f27667950e1a9805080526cb
-  data.tar.gz: bfc3af66227345e6a8e14add2ec059afa57af1e1
+  metadata.gz: 21b5442c102b231ee697de9a8d95fb9ecdb53476
+  data.tar.gz: 0a42a650390afaf5ee88aea41ccede4b4040d547
 SHA512:
-  metadata.gz: 0f6a3d45b85f5a5e6a91f9c6391be42436592fef653a093afc943e6d4952eef5db5239da761f25fff04ed223342e1a848ddd2dbbcc61abc5c9286f765d4160ef
-  data.tar.gz: 9e3562e5a443441c142fce21825461f33b8c81e56fb68eda385571fc6c064d476c35a8113957f8f962a1e5846edd0ae54400887f7a0c0584820c4b45fe1d1373
+  metadata.gz: 78b24d80af933ec0b43fb03c7baf5ef843cfdd7b0f1eead56d28b439c7c29e981b4a48a411ad771ccdc221d59474604b3d36dafae27817f721536458b28aa775
+  data.tar.gz: 5def7cc3f8ac36ae40d6242492f890e76bef0ac67aa6f0c6df6188f753148940de5baeee4b8640bc0c427ee34cf9c57965097ce17c2f56ff4ff3cccdf63bf816

data/CHANGELOG.md

@@ -1,3 +1,9 @@
+## 2.0.0 (2014-08-07)
+
+Bugfixes:
+
+ - bump omniauth-oauth2 dependency which addresses CVE-2012-6134 (#162, @linedotstar)
+
 ## 1.6.0 (2014-01-13)
 
 Features:

data/README.md

@@ -1,5 +1,5 @@
-**IMPORTANT: If you're running < 1.5.1, please upgrade to address 2 security vulnerabilities.
-More details [here](https://github.com/mkdynamic/omniauth-facebook/wiki/CSRF-vulnerability:-CVE-2013-4562) and [here](https://github.com/mkdynamic/omniauth-facebook/wiki/Access-token-vulnerability:-CVE-2013-4593).**
+**IMPORTANT: If you're running < 1.5.1, please upgrade to the latest version to address 3 security vulnerabilities.
+More details [here](https://github.com/mkdynamic/omniauth-facebook/wiki/CSRF-vulnerability:-CVE-2013-4562), [here](https://github.com/mkdynamic/omniauth-facebook/wiki/Access-token-vulnerability:-CVE-2013-4593) and [here](http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-6134).**
 
 ---
 

data/example/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: ../
   specs:
-    omniauth-facebook (1.6.0)
+    omniauth-facebook (2.0.0.pre1)
       omniauth-oauth2 (~> 1.1)
 
 GEM
@@ -10,8 +10,8 @@ GEM
     backports (3.3.5)
     faraday (0.9.0)
       multipart-post (>= 1.2, < 3)
-    hashie (2.0.5)
-    jwt (0.1.11)
+    hashie (2.1.1)
+    jwt (0.1.13)
       multi_json (>= 1.5)
     multi_json (1.8.2)
     multi_xml (0.5.5)

data/lib/omniauth/facebook/version.rb

@@ -1,5 +1,5 @@
 module OmniAuth
   module Facebook
-    VERSION = "2.0.0.pre1"
+    VERSION = "2.0.0"
   end
 end

data/omniauth-facebook.gemspec

@@ -16,7 +16,7 @@ Gem::Specification.new do |s|
   s.executables   = `git ls-files -- bin/*`.split("\n").map { |f| File.basename(f) }
   s.require_paths = ['lib']
 
-  s.add_runtime_dependency 'omniauth-oauth2', '~> 1.1'
+  s.add_runtime_dependency 'omniauth-oauth2', '~> 1.2'
 
   s.add_development_dependency 'minitest'
   s.add_development_dependency 'mocha'

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: omniauth-facebook
 version: !ruby/object:Gem::Version
-  version: 2.0.0.pre1
+  version: 2.0.0
 platform: ruby
 authors:
 - Mark Dodwell
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-05-12 00:00:00.000000000 Z
+date: 2014-08-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: omniauth-oauth2
@@ -17,14 +17,14 @@ dependencies:
     requirements:
     - - ~>
       - !ruby/object:Gem::Version
-        version: '1.1'
+        version: '1.2'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ~>
       - !ruby/object:Gem::Version
-        version: '1.1'
+        version: '1.2'
 - !ruby/object:Gem::Dependency
   name: minitest
   requirement: !ruby/object:Gem::Requirement
@@ -108,9 +108,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: '0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - '>'
+  - - '>='
     - !ruby/object:Gem::Version
-      version: 1.3.1
+      version: '0'
 requirements: []
 rubyforge_project: 
 rubygems_version: 2.2.2