cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Use upstream patch to fix the following vulnerabilities in rubygems:

Browse Source 
CVE-2019-8320: Delete directory using symlink when decompressing tar
CVE-2019-8321: Escape sequence injection vulnerability in verbose
CVE-2019-8322: Escape sequence injection vulnerability in gem owner
CVE-2019-8323: Escape sequence injection vulnerability in API response handling
CVE-2019-8324: Installing a malicious gem may lead to arbitrary code execution
CVE-2019-8325: Escape sequence injection vulnerability in errors
This commit is contained in:
jeremy 2019-03-15 16:46:41 +00:00
parent 147d437975
commit ea5b1a22a7
3 changed files with 8 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
lang/ruby/2.4/Makefile
View File

@ -1,11 +1,13 @@
# $OpenBSD: Makefile,v 1.14 2018/11/30 15:19:07 jeremy Exp $
# $OpenBSD: Makefile,v 1.15 2019/03/15 16:46:41 jeremy Exp $
VERSION = 2.4.5
SHARED_LIBS = ruby24 2.0
NEXTVER = 2.5
REVISION = 0
REVISION-main = 1
REVISION-main = 2
REVISION-ri_docs = 1
PATCHFILES = 7669/ruby-2.4.5-rubygems-v2.patch:0
PSEUDO_FLAVORS= no_ri_docs bootstrap
# Do not build the RI docs on slow arches

2
lang/ruby/2.4/distinfo
View File

@ -1,2 +1,4 @@
SHA256 (7669/ruby-2.4.5-rubygems-v2.patch) = FLWaNT38+GCMpDh8Iy7heTBncLyeXjQbsPdZGZAoWoY=
SHA256 (ruby-2.4.5.tar.gz) = Zzd0Gub/phF0yKPc3YupK8OIJ4J6sdfqHseLw878UZg=
SIZE (7669/ruby-2.4.5-rubygems-v2.patch) = 12769
SIZE (ruby-2.4.5.tar.gz) = 14232887

4
lang/ruby/2.4/pkg/PLIST-ri_docs
View File

@ -1,4 +1,4 @@
@comment $OpenBSD: PLIST-ri_docs,v 1.6 2018/10/22 14:45:52 jeremy Exp $
@comment $OpenBSD: PLIST-ri_docs,v 1.7 2019/03/15 16:46:41 jeremy Exp $
share/ri/
share/ri/${REV}/
share/ri/${REV}/system/
@ -2710,7 +2710,7 @@ share/ri/${REV}/system/Gem/Installer/shebang-i.ri
share/ri/${REV}/system/Gem/Installer/spec-i.ri
share/ri/${REV}/system/Gem/Installer/spec_file-i.ri
share/ri/${REV}/system/Gem/Installer/unpack-i.ri
share/ri/${REV}/system/Gem/Installer/verify_spec_name-i.ri
share/ri/${REV}/system/Gem/Installer/verify_spec-i.ri
share/ri/${REV}/system/Gem/Installer/windows_stub_script-i.ri
share/ri/${REV}/system/Gem/Installer/wrappers-i.ri
share/ri/${REV}/system/Gem/Installer/write_build_info_file-i.ri