diff options
| author | taca <taca> | 2008-06-20 15:39:29 +0000 |
|---|---|---|
| committer | taca <taca> | 2008-06-20 15:39:29 +0000 |
| commit | 58a873b7573e1c67832a9a4f399bf8bf10f304da (patch) | |
| tree | c0f7918df77302e990b4d0612319e7e1c7141fa6 /lang/ruby18-base/patches/patch-ab | |
| parent | 64609fa40563b44db988077443730894154797f5 (diff) | |
| download | pkgsrc-58a873b7573e1c67832a9a4f399bf8bf10f304da.tar.gz | |
Update Ruby 1.8.7 patchlevel 22.
This is security fix:
http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities
Fri Jun 20 18:25:18 2008 Nobuyoshi Nakada <nobu@ruby-lang.org>
* string.c (rb_str_buf_append): should infect.
Fri Jun 20 16:33:09 2008 Nobuyoshi Nakada <nobu@ruby-lang.org>
* array.c (rb_ary_store, rb_ary_splice): not depend on unspecified
behavior at integer overflow.
* string.c (str_buf_cat): ditto.
Wed Jun 18 22:24:46 2008 URABE Shyouhei <shyouhei@ruby-lang.org>
* array.c (ary_new, rb_ary_initialize, rb_ary_store,
rb_ary_aplice, rb_ary_times): integer overflows should be
checked. based on patches from Drew Yao <ayao at apple.com>
fixed CVE-2008-2726
* string.c (rb_str_buf_append): fixed unsafe use of alloca,
which led memory corruption. based on a patch from Drew Yao
<ayao at apple.com> fixed CVE-2008-2726
* sprintf.c (rb_str_format): backported from trunk.
* intern.h: ditto.
Tue Jun 17 15:09:46 2008 Nobuyoshi Nakada <nobu@ruby-lang.org>
* file.c (file_expand_path): no need to expand root path which has no
short file name. [ruby-dev:35095]
Sun Jun 15 19:27:40 2008 Akinori MUSHA <knu@iDaemons.org>
* configure.in: Fix $LOAD_PATH. Properly expand vendor_ruby
directories; submitted by Takahiro Kambe <taca at
back-street.net> in [ruby-dev:35099].
Diffstat (limited to 'lang/ruby18-base/patches/patch-ab')
| -rw-r--r-- | lang/ruby18-base/patches/patch-ab | 25 |
1 files changed, 1 insertions, 24 deletions
diff --git a/lang/ruby18-base/patches/patch-ab b/lang/ruby18-base/patches/patch-ab index e7845572039..11fd9813145 100644 --- a/lang/ruby18-base/patches/patch-ab +++ b/lang/ruby18-base/patches/patch-ab @@ -1,4 +1,4 @@ -$NetBSD: patch-ab,v 1.11 2008/06/19 14:35:37 taca Exp $ +$NetBSD: patch-ab,v 1.12 2008/06/20 15:39:29 taca Exp $ --- configure.orig 2008-06-09 18:38:04.000000000 +0900 +++ configure @@ -49,26 +49,3 @@ $NetBSD: patch-ab,v 1.11 2008/06/19 14:35:37 taca Exp $ fi LDFLAGS="-L. $LDFLAGS" -@@ -17563,18 +17582,15 @@ fi - VENDOR_DIR=`eval echo \\"${vendordir}\\"` - case "$target_os" in - cygwin*|mingw*|*djgpp*|os2-emx*) -- RUBY_VENDOR_LIB_PATH="`expr "$VENDOR_DIR" : "$prefix\(/.*\)"`" || -- RUBY_VENDOR_LIB_PATH="$VENDOR_DIR";; -+ RUBY_VENDOR_LIB_PATH="`eval echo "$VENDOR_DIR" | sed 's|^NONE/|/|;s|^'"$prefix"'/|/|'`" -+ ;; - *) -- RUBY_VENDOR_LIB_PATH="$VENDOR_DIR";; -+ RUBY_VENDOR_LIB_PATH="`eval echo \\"$VENDOR_DIR\\" | sed 's|^NONE/|'"$prefix"'/|'`" -+ ;; - esac - RUBY_VENDOR_LIB_PATH2="${RUBY_VENDOR_LIB_PATH}/${MAJOR}.${MINOR}" - - cat >>confdefs.h <<_ACEOF --#define RUBY_LIB "${RUBY_LIB_PATH}" --_ACEOF -- --cat >>confdefs.h <<_ACEOF - #define RUBY_VENDOR_LIB "${RUBY_VENDOR_LIB_PATH}" - _ACEOF - |