Files
buildroot/package/ruby
Peter Korsgaard 9087da9922 package/ruby: security bump to version 2.7.5
Fixes the following security issues:

- CVE-2021-41817: Regular Expression Denial of Service Vulnerability of Date
  Parsing Methods
  https://www.ruby-lang.org/en/news/2021/11/15/date-parsing-method-regexp-dos-cve-2021-41817/

- CVE-2021-41816: Buffer Overrun in CGI.escape_html
  https://www.ruby-lang.org/en/news/2021/11/24/buffer-overrun-in-cgi-escape_html-cve-2021-41816/

- CVE-2021-41819: Cookie Prefix Spoofing in CGI::Cookie.parse
  https://www.ruby-lang.org/en/news/2021/11/24/cookie-prefix-spoofing-in-cgi-cookie-parse-cve-2021-41819/

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-01-15 12:34:23 +01:00
..