Fix ruby-mode.el command injection vulnerability (CVE-2022-48338)
authorXi Lu <lx@shellcodes.org>
Fri, 23 Dec 2022 04:52:48 +0000 (12:52 +0800)
committerRob Browning <rlb@defaultvalue.org>
Sat, 13 May 2023 20:17:27 +0000 (21:17 +0100)
commitbe69d7108c0411369888a21bec0bd2abfadd75b0
treea981624216c74d5edfcfba971346e860ab0dd352
parentdc07c703de273f7b563b6245edeb74effdef6f6c
Fix ruby-mode.el command injection vulnerability (CVE-2022-48338)

This upstream patch has been incorporated to fix the problem:

  Fix ruby-mode.el local command injection vulnerability (bug#60268)

  * lisp/progmodes/ruby-mode.el
  (ruby-find-library-file): Fix local command injection vulnerability.

Origin: upstream, commit 22fb5ff5126dc8bb01edaa0252829d853afb284f
Bug: https://debbugs.gnu.org/60268
Bug-Debian: https://bugs.debian.org/1031730
Forwarded: not-needed

Gbp-Pq: Name 0021-Fix-ruby-mode.el-command-injection-vulnerability-CVE.patch
lisp/progmodes/ruby-mode.el