CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2017/09/02 15:32:07
Modified files:
lang/ruby/2.1 : Makefile
Added files:
lang/ruby/2.1/patches:
patch-lib_rubygems_commands_query_command_rb
patch-lib_rubygems_installer_rb
patch-lib_rubygems_remote_fetcher_rb
patch-lib_rubygems_specification_rb
patch-lib_rubygems_text_rb
Log message:
Backport security patch from ruby 2.2 to ruby 2.1. Fixes the following
security vulnerabilities:
* Fix a DNS request hijacking vulnerability.
* Fix an ANSI escape sequence vulnerability.
* Fix a DOS vulernerability in the query command.
* Fix a vulnerability in the gem installer that allowed a malicious
gem to overwrite arbitrary files.
