rubygems-update 2.4.6 → 2.4.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of rubygems-update might be problematic. Click here for more details.

checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA1:
3
- metadata.gz: 0859dfcdadf9be0170afcca83b23b0234426ef27
4
- data.tar.gz: af835223a2d14abe818b559c1bcb76642dd19259
3
+ metadata.gz: 5957b4caef4d5ae7826a3f4ee4ea8e7174a1dde0
4
+ data.tar.gz: ec0b2563d1b6b07d34f3375ce857e32a928b9b4c
5
5
  SHA512:
6
- metadata.gz: 07313e5435e5a114cdfbcd097bfb0c94ee5f757232c7101407eb1e40628342fa00d54a38f90491101304bfe2a403f57f8f421ca0375fb8e5c43115f291c3ca83
7
- data.tar.gz: 8a13fa1ff299fd1107aaa79150e7c1fab6a6e9ed686ebd4072dc0694556b59898bc2b5d659454f09623a7047d97c7a64a6c3143ffc42ac68098a4b1f70653669
6
+ metadata.gz: cb03080a6d5f74eca52ee3f06b825a8b7438dc51b0a9e18107f978df09b3d2d51e17a749a6d9564acf6d63fd6ca253bf44d62664448ca8164003b9fea43a77c8
7
+ data.tar.gz: 937345a29ff97fa27d915d367f66df8edd56d9e0505cb84ebdb702162e8d258faf9e2babb760efe047491a7b0123c2018c9d6cf7cd0a8cadd7c3b9b478133d88
@@ -1,5 +1,12 @@
1
1
  # coding: UTF-8
2
2
 
3
+ === 2.4.7 / 2015-05-14
4
+
5
+ Bug fixes:
6
+
7
+ * Backport: Limit API endpoint to original security domain for CVE-2015-3900.
8
+ Fix by claudijd
9
+
3
10
  === 2.4.6 / 2014-02-05
4
11
 
5
12
  Bug fixes:
data/Rakefile CHANGED
@@ -34,7 +34,7 @@ hoe = Hoe.spec 'rubygems-update' do
34
34
  spec_extras[:executables] = ['update_rubygems']
35
35
 
36
36
  rdoc_locations <<
37
- 'docs.seattlerb.org:/data/www/docs.seattlerb.org/rubygems/'
37
+ 'docs-push.seattlerb.org:/data/www/docs.seattlerb.org/rubygems/'
38
38
 
39
39
  clean_globs.push('**/debug.log',
40
40
  '*.out',
@@ -9,7 +9,7 @@ require 'rbconfig'
9
9
  require 'thread'
10
10
 
11
11
  module Gem
12
- VERSION = '2.4.6'
12
+ VERSION = '2.4.7'
13
13
  end
14
14
 
15
15
  # Must be first since it unloads the prelude from 1.9.2
@@ -94,7 +94,13 @@ class Gem::RemoteFetcher
94
94
  rescue Resolv::ResolvError
95
95
  uri
96
96
  else
97
- URI.parse "#{uri.scheme}://#{res.target}#{uri.path}"
97
+ target = res.target.to_s.strip
98
+
99
+ if /#{host}\z/ =~ target
100
+ return URI.parse "#{uri.scheme}://#{target}#{uri.path}"
101
+ end
102
+
103
+ uri
98
104
  end
99
105
  end
100
106
 
@@ -167,6 +167,21 @@ gems:
167
167
  end
168
168
 
169
169
  def test_api_endpoint
170
+ uri = URI.parse "http://example.com/foo"
171
+ target = MiniTest::Mock.new
172
+ target.expect :target, "gems.example.com"
173
+
174
+ dns = MiniTest::Mock.new
175
+ dns.expect :getresource, target, [String, Object]
176
+
177
+ fetch = Gem::RemoteFetcher.new nil, dns
178
+ assert_equal URI.parse("http://gems.example.com/foo"), fetch.api_endpoint(uri)
179
+
180
+ target.verify
181
+ dns.verify
182
+ end
183
+
184
+ def test_api_endpoint_ignores_trans_domain_values
170
185
  uri = URI.parse "http://gems.example.com/foo"
171
186
  target = MiniTest::Mock.new
172
187
  target.expect :target, "blah.com"
@@ -175,8 +190,7 @@ gems:
175
190
  dns.expect :getresource, target, [String, Object]
176
191
 
177
192
  fetch = Gem::RemoteFetcher.new nil, dns
178
- @fetcher = fetcher
179
- assert_equal URI.parse("http://blah.com/foo"), fetch.api_endpoint(uri)
193
+ assert_equal URI.parse("http://gems.example.com/foo"), fetch.api_endpoint(uri)
180
194
 
181
195
  target.verify
182
196
  dns.verify
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: rubygems-update
3
3
  version: !ruby/object:Gem::Version
4
- version: 2.4.6
4
+ version: 2.4.7
5
5
  platform: ruby
6
6
  authors:
7
7
  - Jim Weirich
@@ -10,7 +10,7 @@ authors:
10
10
  autorequire:
11
11
  bindir: bin
12
12
  cert_chain: []
13
- date: 2015-02-16 00:00:00.000000000 Z
13
+ date: 2015-05-14 00:00:00.000000000 Z
14
14
  dependencies:
15
15
  - !ruby/object:Gem::Dependency
16
16
  name: minitest
@@ -18,14 +18,14 @@ dependencies:
18
18
  requirements:
19
19
  - - "~>"
20
20
  - !ruby/object:Gem::Version
21
- version: '5.4'
21
+ version: '5.6'
22
22
  type: :development
23
23
  prerelease: false
24
24
  version_requirements: !ruby/object:Gem::Requirement
25
25
  requirements:
26
26
  - - "~>"
27
27
  - !ruby/object:Gem::Version
28
- version: '5.4'
28
+ version: '5.6'
29
29
  - !ruby/object:Gem::Dependency
30
30
  name: rdoc
31
31
  requirement: !ruby/object:Gem::Requirement
@@ -535,134 +535,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
535
535
  version: '0'
536
536
  requirements: []
537
537
  rubyforge_project:
538
- rubygems_version: 2.4.2
538
+ rubygems_version: 2.4.5
539
539
  signing_key:
540
540
  specification_version: 4
541
541
  summary: RubyGems is a package management framework for Ruby
542
- test_files:
543
- - test/rubygems/test_bundled_ca.rb
544
- - test/rubygems/test_config.rb
545
- - test/rubygems/test_deprecate.rb
546
- - test/rubygems/test_gem.rb
547
- - test/rubygems/test_gem_available_set.rb
548
- - test/rubygems/test_gem_command.rb
549
- - test/rubygems/test_gem_command_manager.rb
550
- - test/rubygems/test_gem_commands_build_command.rb
551
- - test/rubygems/test_gem_commands_cert_command.rb
552
- - test/rubygems/test_gem_commands_check_command.rb
553
- - test/rubygems/test_gem_commands_cleanup_command.rb
554
- - test/rubygems/test_gem_commands_contents_command.rb
555
- - test/rubygems/test_gem_commands_dependency_command.rb
556
- - test/rubygems/test_gem_commands_environment_command.rb
557
- - test/rubygems/test_gem_commands_fetch_command.rb
558
- - test/rubygems/test_gem_commands_generate_index_command.rb
559
- - test/rubygems/test_gem_commands_help_command.rb
560
- - test/rubygems/test_gem_commands_install_command.rb
561
- - test/rubygems/test_gem_commands_list_command.rb
562
- - test/rubygems/test_gem_commands_lock_command.rb
563
- - test/rubygems/test_gem_commands_mirror.rb
564
- - test/rubygems/test_gem_commands_open_command.rb
565
- - test/rubygems/test_gem_commands_outdated_command.rb
566
- - test/rubygems/test_gem_commands_owner_command.rb
567
- - test/rubygems/test_gem_commands_pristine_command.rb
568
- - test/rubygems/test_gem_commands_push_command.rb
569
- - test/rubygems/test_gem_commands_query_command.rb
570
- - test/rubygems/test_gem_commands_search_command.rb
571
- - test/rubygems/test_gem_commands_server_command.rb
572
- - test/rubygems/test_gem_commands_setup_command.rb
573
- - test/rubygems/test_gem_commands_sources_command.rb
574
- - test/rubygems/test_gem_commands_specification_command.rb
575
- - test/rubygems/test_gem_commands_stale_command.rb
576
- - test/rubygems/test_gem_commands_uninstall_command.rb
577
- - test/rubygems/test_gem_commands_unpack_command.rb
578
- - test/rubygems/test_gem_commands_update_command.rb
579
- - test/rubygems/test_gem_commands_which_command.rb
580
- - test/rubygems/test_gem_commands_yank_command.rb
581
- - test/rubygems/test_gem_config_file.rb
582
- - test/rubygems/test_gem_dependency.rb
583
- - test/rubygems/test_gem_dependency_installer.rb
584
- - test/rubygems/test_gem_dependency_list.rb
585
- - test/rubygems/test_gem_dependency_resolution_error.rb
586
- - test/rubygems/test_gem_doctor.rb
587
- - test/rubygems/test_gem_ext_builder.rb
588
- - test/rubygems/test_gem_ext_cmake_builder.rb
589
- - test/rubygems/test_gem_ext_configure_builder.rb
590
- - test/rubygems/test_gem_ext_ext_conf_builder.rb
591
- - test/rubygems/test_gem_ext_rake_builder.rb
592
- - test/rubygems/test_gem_gem_runner.rb
593
- - test/rubygems/test_gem_gemcutter_utilities.rb
594
- - test/rubygems/test_gem_impossible_dependencies_error.rb
595
- - test/rubygems/test_gem_indexer.rb
596
- - test/rubygems/test_gem_install_update_options.rb
597
- - test/rubygems/test_gem_installer.rb
598
- - test/rubygems/test_gem_local_remote_options.rb
599
- - test/rubygems/test_gem_name_tuple.rb
600
- - test/rubygems/test_gem_package.rb
601
- - test/rubygems/test_gem_package_old.rb
602
- - test/rubygems/test_gem_package_tar_header.rb
603
- - test/rubygems/test_gem_package_tar_reader.rb
604
- - test/rubygems/test_gem_package_tar_reader_entry.rb
605
- - test/rubygems/test_gem_package_tar_writer.rb
606
- - test/rubygems/test_gem_package_task.rb
607
- - test/rubygems/test_gem_path_support.rb
608
- - test/rubygems/test_gem_platform.rb
609
- - test/rubygems/test_gem_rdoc.rb
610
- - test/rubygems/test_gem_remote_fetcher.rb
611
- - test/rubygems/test_gem_request.rb
612
- - test/rubygems/test_gem_request_connection_pools.rb
613
- - test/rubygems/test_gem_request_set.rb
614
- - test/rubygems/test_gem_request_set_gem_dependency_api.rb
615
- - test/rubygems/test_gem_request_set_lockfile.rb
616
- - test/rubygems/test_gem_request_set_lockfile_parser.rb
617
- - test/rubygems/test_gem_request_set_lockfile_tokenizer.rb
618
- - test/rubygems/test_gem_requirement.rb
619
- - test/rubygems/test_gem_resolver.rb
620
- - test/rubygems/test_gem_resolver_activation_request.rb
621
- - test/rubygems/test_gem_resolver_api_set.rb
622
- - test/rubygems/test_gem_resolver_api_specification.rb
623
- - test/rubygems/test_gem_resolver_best_set.rb
624
- - test/rubygems/test_gem_resolver_composed_set.rb
625
- - test/rubygems/test_gem_resolver_conflict.rb
626
- - test/rubygems/test_gem_resolver_dependency_request.rb
627
- - test/rubygems/test_gem_resolver_git_set.rb
628
- - test/rubygems/test_gem_resolver_git_specification.rb
629
- - test/rubygems/test_gem_resolver_index_set.rb
630
- - test/rubygems/test_gem_resolver_index_specification.rb
631
- - test/rubygems/test_gem_resolver_installed_specification.rb
632
- - test/rubygems/test_gem_resolver_installer_set.rb
633
- - test/rubygems/test_gem_resolver_local_specification.rb
634
- - test/rubygems/test_gem_resolver_lock_set.rb
635
- - test/rubygems/test_gem_resolver_lock_specification.rb
636
- - test/rubygems/test_gem_resolver_requirement_list.rb
637
- - test/rubygems/test_gem_resolver_specification.rb
638
- - test/rubygems/test_gem_resolver_vendor_set.rb
639
- - test/rubygems/test_gem_resolver_vendor_specification.rb
640
- - test/rubygems/test_gem_security.rb
641
- - test/rubygems/test_gem_security_policy.rb
642
- - test/rubygems/test_gem_security_signer.rb
643
- - test/rubygems/test_gem_security_trust_dir.rb
644
- - test/rubygems/test_gem_server.rb
645
- - test/rubygems/test_gem_silent_ui.rb
646
- - test/rubygems/test_gem_source.rb
647
- - test/rubygems/test_gem_source_fetch_problem.rb
648
- - test/rubygems/test_gem_source_git.rb
649
- - test/rubygems/test_gem_source_installed.rb
650
- - test/rubygems/test_gem_source_list.rb
651
- - test/rubygems/test_gem_source_local.rb
652
- - test/rubygems/test_gem_source_lock.rb
653
- - test/rubygems/test_gem_source_specific_file.rb
654
- - test/rubygems/test_gem_source_vendor.rb
655
- - test/rubygems/test_gem_spec_fetcher.rb
656
- - test/rubygems/test_gem_specification.rb
657
- - test/rubygems/test_gem_stream_ui.rb
658
- - test/rubygems/test_gem_stub_specification.rb
659
- - test/rubygems/test_gem_text.rb
660
- - test/rubygems/test_gem_uninstaller.rb
661
- - test/rubygems/test_gem_unsatisfiable_dependency_error.rb
662
- - test/rubygems/test_gem_uri_formatter.rb
663
- - test/rubygems/test_gem_util.rb
664
- - test/rubygems/test_gem_validator.rb
665
- - test/rubygems/test_gem_version.rb
666
- - test/rubygems/test_gem_version_option.rb
667
- - test/rubygems/test_kernel.rb
668
- - test/rubygems/test_require.rb
542
+ test_files: []