Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ruby: update to 3.3.5 to resolve CVE-2024-39908 and CVE-2024-49761 #10988

Open
wants to merge 4 commits into
base: fasttrack/3.0
Choose a base branch
from
Open

ruby: update to 3.3.5 to resolve CVE-2024-39908 and CVE-2024-49761 #10988

wants to merge 4 commits into from

Commits on Nov 18, 2024

  1. ruby: update to 3.3.5 to resolve CVE-2024-39908 

    Also remove CVE-2024-41946.patch as it no longer applies as ruby 3.3.5 containers rubygem-rexml 3.3.6, where CVE-2024-41946 is already fixed

Signed-off-by: Saul Paredes <[email protected]>
    @Redent0r
    Redent0r committed Nov 18, 2024
    Configuration menu
    Copy the full SHA
    0f58e4f View commit details
    Browse the repository at this point in the history

  2. ruby: patch CVE-2024-49761 

    Patch adapted from ruby/rexml@ce59f2e
which fixes CVE-2024-49761 per https://nvd.nist.gov/vuln/detail/CVE-2024-49761

Needed for rubygem-rexml versions < 3.3.9

Signed-off-by: Saul Paredes <[email protected]>
    @Redent0r
    Redent0r committed Nov 18, 2024
    Configuration menu
    Copy the full SHA
    3718919 View commit details
    Browse the repository at this point in the history

Commits on Nov 21, 2024

  1. ruby: add neccessary patches to remove lock files from rubygems binaries 

    From https://src.fedoraproject.org/rpms/ruby/c/b7e197fb887200e4faaf8fae663a9df00bdc09d3?branch=rawhide
    @Redent0r
    Redent0r committed Nov 21, 2024
    Configuration menu
    Copy the full SHA
    cf05317 View commit details
    Browse the repository at this point in the history

Commits on Nov 22, 2024

  1. Merge branch 'fasttrack/3.0' into saulparedes/CVE-2024-39908

    @mbykhovtsev-ms
    mbykhovtsev-ms authored Nov 22, 2024
    Configuration menu
    Copy the full SHA
    537a038 View commit details
    Browse the repository at this point in the history