gnu: ruby-2.4.1: Fix CVE-2017-{0899,0900,0901,0902}.

* gnu/packages/patches/ruby-rubygems-2612-ruby24.patch,
gnu/packages/patches/ruby-rubygems-2613-ruby24.patch: New files.
* gnu/local.mk (dist_patch_DATA): Add them.
* gnu/packages/ruby.scm (ruby-2.4.1)[source]: Use them.
This commit is contained in:
Ben Woodcroft 2017-08-31 10:06:36 +08:00
parent 690a904ad7
commit 9770cbf9e2
No known key found for this signature in database
GPG key ID: 2A6AD9F4AAC20DF6
4 changed files with 798 additions and 1 deletions

View file

@ -121,7 +121,10 @@ a focus on simplicity and productivity.")
(snippet `(begin
;; Remove bundled libffi
(delete-file-recursively "ext/fiddle/libffi-3.2.1")
#t))))))
#t))
(patches
(search-patches "ruby-rubygems-2612-ruby24.patch"
"ruby-rubygems-2613-ruby24.patch"))))))
(define-public ruby-2.3
(package