CVE-2019-8320-25
authorAntonio Terceiro <terceiro@debian.org>
Sun, 15 Dec 2019 16:28:25 +0000 (16:28 +0000)
committerSalvatore Bonaccorso <carnil@debian.org>
Sun, 15 Dec 2019 16:28:25 +0000 (16:28 +0000)
commit2c286622dcee4be0f1fc8aa8698b57382689d59a
tree5854558d9e30e093af884fab555f475d0615e110
parentf407b4fbc80311c6ebe46a1357672c6abd81ebd6
CVE-2019-8320-25

Backport of https://github.com/rubygems/rubygems/commit/56c0bbb69e4506bda7ef7f447dfec5db820df20b
addressing, thanks to Leonidas S. Barbosa

CVE-2019-8320
CVE-2019-8321
CVE-2019-8322
CVE-2019-8323
CVE-2019-8324
CVE-2019-8325

Gbp-Pq: Name CVE-2019-8320-25.patch
lib/rubygems/command_manager.rb
lib/rubygems/commands/owner_command.rb
lib/rubygems/gemcutter_utilities.rb
lib/rubygems/installer.rb
lib/rubygems/package.rb
lib/rubygems/user_interaction.rb
test/rubygems/test_gem_installer.rb
test/rubygems/test_gem_package.rb
test/rubygems/test_gem_text.rb