aboutsummaryrefslogtreecommitdiffstats
path: root/meta/recipes-devtools/ruby/ruby_2.4.0.bb
diff options
context:
space:
mode:
authorJoe Slater <jslater@windriver.com>2017-08-16 14:46:11 -0700
committerRichard Purdie <richard.purdie@linuxfoundation.org>2017-09-11 22:15:51 +0100
commit7ba25f0d8d95ece5f5d56ace5b1e9c8c797efbc0 (patch)
treefc533302b104e6a684f7f8ff0444b52fef958cfe /meta/recipes-devtools/ruby/ruby_2.4.0.bb
parent450942db7f4638eba7ec262901fe1d7e1b1f6070 (diff)
downloadopenembedded-core-7ba25f0d8d95ece5f5d56ace5b1e9c8c797efbc0.tar.gz
ruby: fix CVE-2017-9224
Use DATA_ENSURE(1) before access. (From OE-Core rev: 9db907a0bd331c47c4882b82f9f1d2a7ef1f6d1f) Signed-off-by: Joe Slater <jslater@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Fixed up to get to apply Signed-off-by: Armin Kuster <akuster808@gmail.com>
Diffstat (limited to 'meta/recipes-devtools/ruby/ruby_2.4.0.bb')
-rw-r--r--meta/recipes-devtools/ruby/ruby_2.4.0.bb4
1 files changed, 4 insertions, 0 deletions
diff --git a/meta/recipes-devtools/ruby/ruby_2.4.0.bb b/meta/recipes-devtools/ruby/ruby_2.4.0.bb
index 4d39c47630..47e521db84 100644
--- a/meta/recipes-devtools/ruby/ruby_2.4.0.bb
+++ b/meta/recipes-devtools/ruby/ruby_2.4.0.bb
@@ -1,5 +1,9 @@
require ruby.inc
+SRC_URI += " \
+ file://ruby-CVE-2017-9224.patch \
+ "
+
SRC_URI[md5sum] = "7e9485dcdb86ff52662728de2003e625"
SRC_URI[sha256sum] = "152fd0bd15a90b4a18213448f485d4b53e9f7662e1508190aa5b702446b29e3d"