From 391127b00291bddba010813f9e033a31290c3b66 Mon Sep 17 00:00:00 2001 From: Joe Slater Date: Wed, 16 Aug 2017 14:46:11 -0700 Subject: ruby: fix CVE-2017-9224 Use DATA_ENSURE(1) before access. (From OE-Core rev: 9db907a0bd331c47c4882b82f9f1d2a7ef1f6d1f) Signed-off-by: Joe Slater Signed-off-by: Richard Purdie --- meta/recipes-devtools/ruby/ruby_2.4.1.bb | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'meta/recipes-devtools/ruby/ruby_2.4.1.bb') diff --git a/meta/recipes-devtools/ruby/ruby_2.4.1.bb b/meta/recipes-devtools/ruby/ruby_2.4.1.bb index 1d335f1c28..77e17f199b 100644 --- a/meta/recipes-devtools/ruby/ruby_2.4.1.bb +++ b/meta/recipes-devtools/ruby/ruby_2.4.1.bb @@ -1,5 +1,9 @@ require ruby.inc +SRC_URI += " \ + file://ruby-CVE-2017-9224.patch \ + " + SRC_URI[md5sum] = "782bca562e474dd25956dd0017d92677" SRC_URI[sha256sum] = "a330e10d5cb5e53b3a0078326c5731888bb55e32c4abfeb27d9e7f8e5d000250" -- cgit v1.2.3-54-g00ecf