Commit Graph

5 Commits

Author SHA1 Message Date
Jarek Prokop
064a52cca5 Let cookies use leading dot in the domain to retain compatibility.
After fixing CVE-2021-33621, the domain parameter regex does not accept
leading dot. This is a behavior difference, that this commit fixes.

5e09d632f3

Related: CVE-2021-33621
2023-06-26 13:40:21 +02:00
Jarek Prokop
070d6a38cc Fix HTTP response splitting in CGI.
Backported from upstream Ruby 2.7.7, commit:
<7cf697179d>

Test "CGICookieTest#test_cgi_cookie_new_with_domain" was adjusted to
deal with Ruby 2.5 not allowing String as key with double splat operator.

Resolves: CVE-2021-33621
2023-06-22 15:19:31 +02:00
Jarek Prokop
59f3e8c0e5 Fix Ruby test failures regarding tzdata and git.
The commit is a cherry-pick from Fedora Rawhide 79d75fdcdd .
The commit is a cherry-pick from Fedora Rawhide f8ef5964d0 .

The purpose is to fix Build failures.

Related: rhbz#2210326
2023-06-22 15:18:50 +02:00
Todd Zullinger
1024e138f4 Fix rdoc parsing of nil text tokens.
With ruby < 2.6.0 / rdoc < 6.0.2, rdoc fails to parse valid ruby code,
resulting in spurious build failures.  An example is asciidoctor >
2.0.15 (though 2.0.20, currently)

While attempting to build asciidoctor-2.0.20 for Fedora and RHEL+EPEL
releases, the following error fails the build on RHEL+EPEL 8:

    Installing ri documentation for asciidoctor-2.0.20
    Installing darkfish documentation for asciidoctor-2.0.20
    ERROR:  While executing gem ... (RDoc::Error)
        error generating Asciidoctor/Converter/ManPageConverter.html:
        no implicit conversion of nil into String (TypeError)

Resolves: rhbz#2210326
2023-06-07 11:58:34 +02:00
James Antill
d3619c094f Import rpm: 6a79cc8230d437ba4c0e950842723d4d37ce3c11 2023-02-20 02:13:04 -05:00