Files
buildroot/package/ruby/ruby.hash
T
Peter Korsgaard 9087da9922 package/ruby: security bump to version 2.7.5
Fixes the following security issues:

- CVE-2021-41817: Regular Expression Denial of Service Vulnerability of Date
  Parsing Methods
  https://www.ruby-lang.org/en/news/2021/11/15/date-parsing-method-regexp-dos-cve-2021-41817/

- CVE-2021-41816: Buffer Overrun in CGI.escape_html
  https://www.ruby-lang.org/en/news/2021/11/24/buffer-overrun-in-cgi-escape_html-cve-2021-41816/

- CVE-2021-41819: Cookie Prefix Spoofing in CGI::Cookie.parse
  https://www.ruby-lang.org/en/news/2021/11/24/cookie-prefix-spoofing-in-cgi-cookie-parse-cve-2021-41819/

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-01-15 12:34:23 +01:00

7 lines
437 B
Plaintext

# https://www.ruby-lang.org/en/news/2021/11/24/ruby-2-7-5-released/
sha256 d216d95190eaacf3bf165303747b02ff13f10b6cfab67a9031b502a49512b516 ruby-2.7.5.tar.xz
# License files, Locally calculated
sha256 b09ca195d2de08f0aacfa8793d0af62d7681c304b3ef714b75813721823295a6 LEGAL
sha256 967586d538a28955ec2541910cf63c5ac345fcdea94bfb1f1705a1f6eb36bcbb COPYING
sha256 a5e3042dacb53eebda91f3b1caefbfec8307711df8c4ed1ed20e4e97c43307a4 BSDL