!188 [sync] PR-185: upgrade rexml to fix CVE-2024-35176

From: @openeuler-sync-bot 
Reviewed-by: @small_leek 
Signed-off-by: @small_leek
This commit is contained in:
openeuler-ci-bot 2024-07-09 03:46:08 +00:00 committed by Gitee
commit fae123144f
No known key found for this signature in database
GPG Key ID: 173E9B9CA92EEF8F
2 changed files with 1829 additions and 1 deletions

View File

@ -33,7 +33,7 @@
Name: ruby Name: ruby
Version: %{ruby_version} Version: %{ruby_version}
Release: 141 Release: 142
Summary: Object-oriented scripting language interpreter Summary: Object-oriented scripting language interpreter
License: (Ruby or BSD) and Public Domain and MIT and CC0 and zlib and UCD License: (Ruby or BSD) and Public Domain and MIT and CC0 and zlib and UCD
URL: https://www.ruby-lang.org/en/ URL: https://www.ruby-lang.org/en/
@ -97,6 +97,7 @@ Patch6020: backport-0002-CVE-2024-35221.patch
Patch6021: backport-0003-CVE-2024-35221.patch Patch6021: backport-0003-CVE-2024-35221.patch
Patch6022: backport-0004-CVE-2024-35221.patch Patch6022: backport-0004-CVE-2024-35221.patch
Patch6023: backport-0005-CVE-2024-35221.patch Patch6023: backport-0005-CVE-2024-35221.patch
Patch6024: upgrade-lib-rexml-to-3.3.1.patch
Provides: %{name}-libs = %{version}-%{release} Provides: %{name}-libs = %{version}-%{release}
Obsoletes: %{name}-libs < %{version}-%{release} Obsoletes: %{name}-libs < %{version}-%{release}
@ -882,6 +883,9 @@ make runruby TESTRUN_SCRIPT=%{SOURCE13}
%{gem_dir}/specifications/matrix-%{matrix_version}.gemspec %{gem_dir}/specifications/matrix-%{matrix_version}.gemspec
%changelog %changelog
* Sat Jul 06 2024 shixuantong <shixuantong1@huawei.com> - 3.2.2-142
- upgrade rexml to fix CVE-2024-35176
* Tue Jun 18 2024 shixuantong <shixuantong1@huawei.com> - 3.2.2-141 * Tue Jun 18 2024 shixuantong <shixuantong1@huawei.com> - 3.2.2-141
- fix CVE-2024-35221 - fix CVE-2024-35221

File diff suppressed because it is too large Load Diff