summaryrefslogtreecommitdiff
path: root/meta/recipes-devtools/ruby/ruby_2.4.1.bb
diff options
context:
space:
mode:
authorJoe Slater <jslater@windriver.com>2017-08-16 14:46:11 -0700
committerRichard Purdie <richard.purdie@linuxfoundation.org>2017-08-17 00:22:52 +0100
commit9db907a0bd331c47c4882b82f9f1d2a7ef1f6d1f (patch)
tree4fbe1363712c0c3b66d91302ce8e2a1cf5e196f4 /meta/recipes-devtools/ruby/ruby_2.4.1.bb
parent31fd20811f6d11e7ed6ac84caf776ac46cd6fb6f (diff)
downloadopenembedded-core-9db907a0bd331c47c4882b82f9f1d2a7ef1f6d1f.tar.gz
openembedded-core-9db907a0bd331c47c4882b82f9f1d2a7ef1f6d1f.tar.bz2
openembedded-core-9db907a0bd331c47c4882b82f9f1d2a7ef1f6d1f.zip
ruby: fix CVE-2017-9224
Use DATA_ENSURE(1) before access. Signed-off-by: Joe Slater <jslater@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-devtools/ruby/ruby_2.4.1.bb')
-rw-r--r--meta/recipes-devtools/ruby/ruby_2.4.1.bb4
1 files changed, 4 insertions, 0 deletions
diff --git a/meta/recipes-devtools/ruby/ruby_2.4.1.bb b/meta/recipes-devtools/ruby/ruby_2.4.1.bb
index 1d335f1c28..77e17f199b 100644
--- a/meta/recipes-devtools/ruby/ruby_2.4.1.bb
+++ b/meta/recipes-devtools/ruby/ruby_2.4.1.bb
@@ -1,5 +1,9 @@
require ruby.inc
+SRC_URI += " \
+ file://ruby-CVE-2017-9224.patch \
+ "
+
SRC_URI[md5sum] = "782bca562e474dd25956dd0017d92677"
SRC_URI[sha256sum] = "a330e10d5cb5e53b3a0078326c5731888bb55e32c4abfeb27d9e7f8e5d000250"