Bug 263357 - lang/ruby32: Add upstream patches to fix recent vulnerabilities
Summary: lang/ruby32: Add upstream patches to fix recent vulnerabilities
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: Yasuhiro Kimura
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-04-17 02:51 UTC by Yasuhiro Kimura
Modified: 2022-04-17 04:10 UTC (History)
0 users

See Also:
sunpoet: maintainer-feedback+


Attachments
Patch file (5.07 KB, patch)
2022-04-17 02:51 UTC, Yasuhiro Kimura
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Yasuhiro Kimura freebsd_committer freebsd_triage 2022-04-17 02:51:43 UTC
Created attachment 233263 [details]
Patch file

Add upstream patches to fix recent vulnerabilities.

Security:       f22144d7-bad1-11ec-9cfe-0800270512f4
Security:       06ed6a49-bad4-11ec-9cfe-0800270512f4
Comment 1 Po-Chuan Hsieh freebsd_committer freebsd_triage 2022-04-17 03:02:47 UTC
LGTM. Thanks!
Comment 2 commit-hook freebsd_committer freebsd_triage 2022-04-17 04:09:09 UTC
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=3d90d93bd56ee79ea165afecd38fd9fec6674d26

commit 3d90d93bd56ee79ea165afecd38fd9fec6674d26
Author:     Yasuhiro Kimura <yasu@FreeBSD.org>
AuthorDate: 2022-04-17 02:18:12 +0000
Commit:     Yasuhiro Kimura <yasu@FreeBSD.org>
CommitDate: 2022-04-17 04:07:45 +0000

    lang/ruby32: Add upstream patches to fix recent vulnerabilities

    PR:             263357
    Approved by:    sunpoet (ruby@)
    Security:       f22144d7-bad1-11ec-9cfe-0800270512f4
    Security:       06ed6a49-bad4-11ec-9cfe-0800270512f4

 Mk/bsd.ruby.mk                               |  2 +-
 lang/ruby32/files/patch-CVE-2022-28738 (new) | 66 ++++++++++++++++++++++++++++
 lang/ruby32/files/patch-CVE-2022-28739 (new) | 64 +++++++++++++++++++++++++++
 3 files changed, 131 insertions(+), 1 deletion(-)