diff options
author | Armin Kuster <akuster808@gmail.com> | 2018-05-03 09:00:59 -0700 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2018-05-15 11:01:17 +0100 |
commit | e31e85d86996796eac51afc0510391f51f7df013 (patch) | |
tree | 3b33a63dbe57095990d1f4431b01741308d1a343 /meta/recipes-devtools | |
parent | 3be01630d8859ca8f14d44056deb4088ca3735bc (diff) | |
download | poky-e31e85d86996796eac51afc0510391f51f7df013.tar.gz |
ruby: Update to 2.4.4
The dot releases are maint only.
2.4.4 included:
CVE-2017-17742: HTTP response splitting in WEBrick
CVE-2018-6914: Unintentional file and directory creation with directory traversal in tempfile and tmpdir
CVE-2018-8777: DoS by large request in WEBrick
CVE-2018-8778: Buffer under-read in String#unpack
CVE-2018-8779: Unintentional socket creation by poisoned NUL byte in UNIXServer and UNIXSocket
CVE-2018-8780: Unintentional directory traversal by poisoned NUL byte in Dir
(From OE-Core rev: ce12ff394281a42448d92109568db33739b2b542)
(From OE-Core rev: 43721cc12ce782603ecdc0aa3a514bc6c8d4f97f)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
[Fixup for Morty context]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-devtools')
-rw-r--r-- | meta/recipes-devtools/ruby/ruby_2.4.4.bb (renamed from meta/recipes-devtools/ruby/ruby_2.4.3.bb) | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/meta/recipes-devtools/ruby/ruby_2.4.3.bb b/meta/recipes-devtools/ruby/ruby_2.4.4.bb index 910da2e1bd..c6faea0fa0 100644 --- a/meta/recipes-devtools/ruby/ruby_2.4.3.bb +++ b/meta/recipes-devtools/ruby/ruby_2.4.4.bb | |||
@@ -8,8 +8,8 @@ SRC_URI += " \ | |||
8 | file://ruby-CVE-2017-9229.patch \ | 8 | file://ruby-CVE-2017-9229.patch \ |
9 | " | 9 | " |
10 | 10 | ||
11 | SRC_URI[md5sum] = "a00e0d49b454f4c0e528e7852d642925" | 11 | SRC_URI[md5sum] = "d50e00ccc1c9cf450f837b92d3ed3e88" |
12 | SRC_URI[sha256sum] = "fd0375582c92045aa7d31854e724471fb469e11a4b08ff334d39052ccaaa3a98" | 12 | SRC_URI[sha256sum] = "254f1c1a79e4cc814d1e7320bc5bdd995dc57e08727d30a767664619a9c8ae5a" |
13 | 13 | ||
14 | # it's unknown to configure script, but then passed to extconf.rb | 14 | # it's unknown to configure script, but then passed to extconf.rb |
15 | # maybe it's not really needed as we're hardcoding the result with | 15 | # maybe it's not really needed as we're hardcoding the result with |