mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-25 19:40:35 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/ruby: security bump to version 2.7.5

Browse Source 
Fixes the following security issues:

- CVE-2021-41817: Regular Expression Denial of Service Vulnerability of Date
  Parsing Methods
  https://www.ruby-lang.org/en/news/2021/11/15/date-parsing-method-regexp-dos-cve-2021-41817/

- CVE-2021-41816: Buffer Overrun in CGI.escape_html
  https://www.ruby-lang.org/en/news/2021/11/24/buffer-overrun-in-cgi-escape_html-cve-2021-41816/

- CVE-2021-41819: Cookie Prefix Spoofing in CGI::Cookie.parse
  https://www.ruby-lang.org/en/news/2021/11/24/cookie-prefix-spoofing-in-cgi-cookie-parse-cve-2021-41819/

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Peter Korsgaard
2022-01-15 12:34:23 +01:00
parent 310d3d6bef
commit 9087da9922
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
package/ruby/ruby.hash
View File

@@ -1,5 +1,5 @@
# https://www.ruby-lang.org/en/news/2021/07/07/ruby-2-7-4-released/
sha256 2a80824e0ad6100826b69b9890bf55cfc4cf2b61a1e1330fccbcb30c46cef8d7 ruby-2.7.4.tar.xz
# https://www.ruby-lang.org/en/news/2021/11/24/ruby-2-7-5-released/
sha256 d216d95190eaacf3bf165303747b02ff13f10b6cfab67a9031b502a49512b516 ruby-2.7.5.tar.xz
# License files, Locally calculated
sha256 b09ca195d2de08f0aacfa8793d0af62d7681c304b3ef714b75813721823295a6 LEGAL
sha256 967586d538a28955ec2541910cf63c5ac345fcdea94bfb1f1705a1f6eb36bcbb COPYING

2
package/ruby/ruby.mk
View File

@@ -5,7 +5,7 @@
################################################################################
RUBY_VERSION_MAJOR = 2.7
RUBY_VERSION = $(RUBY_VERSION_MAJOR).4
RUBY_VERSION = $(RUBY_VERSION_MAJOR).5
RUBY_VERSION_EXT = 2.7.0
RUBY_SITE = http://cache.ruby-lang.org/pub/ruby/$(RUBY_VERSION_MAJOR)
RUBY_SOURCE = ruby-$(RUBY_VERSION).tar.xz