nixpkgs/rubygems-src.nix at 45a92a0dddb5c256c2b8af7ebe7068c306bedc72 - nixpkgs - nordic-dev.net

nordic-dev.net/nixpkgs

mirror of https://github.com/NixOS/nixpkgs.git synced 2024-12-21 05:04:00 +00:00

Peter Hoeg 9f51b3c105 rubygems: 2.6.10 -> 2.6.13

Fixes a number of CVEs:

- a DNS request hijacking vulnerability. (CVE-2017-0902)
- an ANSI escape sequence vulnerability. (CVE-2017-0899)
- a DoS vulnerability in the query command. (CVE-2017-0900)
- a vulnerability in the gem installer that allowed a malicious gem to overwrite arbitrary files. (CVE-2017-0901)

2017-09-08 12:07:55 +08:00

9 lines

211 B

Nix

Raw Blame History

 { fetchurl
 , version ? "2.6.13"
 , sha256 ? "1j98ww8cz9y4wwshg7p4i4acrmls3ywkyj1nlkh4k3bywwm50hfh"
 }:
 fetchurl {
   url = "http://production.cf.rubygems.org/rubygems/rubygems-${version}.tgz";
   sha256 = sha256;
 }