CVE-2019-8320: Delete directory using symlink when decompressing tar
CVE-2019-8321: Escape sequence injection vulnerability in verbose
CVE-2019-8322: Escape sequence injection vulnerability in gem owner
CVE-2019-8323: Escape sequence injection vulnerability in API response handling
CVE-2019-8324: Installing a malicious gem may lead to arbitrary code execution
CVE-2019-8325: Escape sequence injection vulnerability in errors
Fixes the following vulnerabilities in rubygems:
CVE-2019-8320: Delete directory using symlink when decompressing tar
CVE-2019-8321: Escape sequence injection vulnerability in verbose
CVE-2019-8322: Escape sequence injection vulnerability in gem owner
CVE-2019-8323: Escape sequence injection vulnerability in API response handling
CVE-2019-8324: Installing a malicious gem may lead to arbitrary code execution
CVE-2019-8325: Escape sequence injection vulnerability in errors
Fixes the following vulnerabilities in rubygems:
CVE-2019-8320: Delete directory using symlink when decompressing tar
CVE-2019-8321: Escape sequence injection vulnerability in verbose
CVE-2019-8322: Escape sequence injection vulnerability in gem owner
CVE-2019-8323: Escape sequence injection vulnerability in API response handling
CVE-2019-8324: Installing a malicious gem may lead to arbitrary code execution
CVE-2019-8325: Escape sequence injection vulnerability in errors
Add a "meta" table that just contains a schema version and a hash.
So that some clients (e.g., portroach) can automatically figure out
whether a rebuild is required.
This unbreaks lang/compcert which is the only devel/ocaml-menhir
consumer in the tree. Not removing BROKEN in compcert for now.
ok daniel@ (lang/compcert maintainer)
Mesh Data Abstraction Library (MDAL) is a C++ library for handling unstructured
mesh data released with MIT license. It provides a single data model for
multiple supported data formats. MDAL is used by QGIS for data access for mesh
layers.
with a cmake patch to fix tests from rsadowski@, thanks!
ok rsadowski@
TextSuggest is a program that shows completions for the word selected
or currently being typed. It is generally bound to a keyboard shortcut.
Testing by pamela@, kn@, and myself
ok kn@
it's a new dependency in order to update ruby-i18n
Modern concurrency tools including agents, futures, promises, thread
pools, actors, supervisors, and more. Inspired by Erlang, Clojure, Go,
JavaScript, actors, and classic concurrency patterns.
feedback and OK jeremy@