Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 19 Oct 2018 07:30:34 +0000
From:      bugzilla-noreply@freebsd.org
To:        ruby@FreeBSD.org
Subject:   maintainer-feedback requested: [Bug 232438] lang/ruby23: Update to 2.4.8 (fixes CVE-2018-1639[56]) and etc
Message-ID:  <bug-232438-21402-t4wCLxf46D@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-232438-21402@https.bugs.freebsd.org/bugzilla/>
References:  <bug-232438-21402@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
Bugzilla Automation <bugzilla@FreeBSD.org> has asked freebsd-ruby mailing l=
ist
<ruby@FreeBSD.org> for maintainer-feedback:
Bug 232438: lang/ruby23: Update to 2.4.8 (fixes CVE-2018-1639[56]) and etc
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D232438



--- Description ---
* Update to 2.4.8. It fixes following vulnerabilities.
  - CVE-2018-16395
  - CVE-2018-16396
* To fix portlint warnings,
  - Reorder variable definitions in Makefile.
  - Regenerate patch by 'make makepatch'.
* Stop using obsolete MLINKS and do what is really expected.
  - When this port is default ruby version, create symlinks
${MANPREFIX}/man/man1/{erb,irb,ri,rub}.1.gz that point to
{erb,irb,ri,rub}23.1.gz.
* Sort INSTALLED_SCRIPTS.

Bug #232427 adds entry to VuXML that describe vulnerabilities fixed with th=
is
version. So please commit it together.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-232438-21402-t4wCLxf46D>