rubygems-update 2.7.11 → 3.0.9

metadata

@@ -1,12 +1,18 @@
 --- !ruby/object:Gem::Specification
 name: rubygems-update
 version: !ruby/object:Gem::Version
-  version: 2.7.11
+  version: 3.0.9
 platform: ruby
 authors:
 - Jim Weirich
 - Chad Fowler
 - Eric Hodel
+- Luis Lavena
+- Aaron Patterson
+- Samuel Giddins
+- André Arko
+- Evan Phoenix
+- Hiroshi SHIBATA
 autorequire:
 bindir: bin
 cert_chain: []
@@ -18,118 +24,115 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.1'
+        version: '3.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.1'
-- !ruby/object:Gem::Dependency
-  name: hoe-seattlerb
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '1.2'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '1.2'
+        version: '3.0'
 - !ruby/object:Gem::Dependency
   name: rdoc
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '4.0'
+        version: '6.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '4.0'
+        version: '6.0'
 - !ruby/object:Gem::Dependency
-  name: ZenTest
+  name: rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '4.5'
+        version: '12.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '4.5'
+        version: '12.0'
 - !ruby/object:Gem::Dependency
-  name: rake
+  name: minitest
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '10.5'
+        version: '5.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '10.5'
+        version: '5.0'
 - !ruby/object:Gem::Dependency
-  name: minitest
+  name: simplecov
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '4.0'
+        version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '4.0'
+        version: '0'
 - !ruby/object:Gem::Dependency
-  name: hoe
+  name: rubocop
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.15'
+        version: 0.60.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.15'
-description: ''
+        version: 0.60.0
+description: |-
+  A package (also known as a library) contains a set of functionality
+    that can be invoked by a Ruby program, such as reading and parsing an XML file. We call
+    these packages 'gems' and RubyGems is a tool to install, create, manage and load these
+    packages in your Ruby environment. RubyGems is also a client for RubyGems.org, a public
+    repository of Gems that allows you to publish a Gem that can be shared and used by other
+    developers. See our guide on publishing a Gem at guides.rubygems.org
 email:
-- rubygems-developers@rubyforge.org
+- ''
+- ''
+- drbrain@segment7.net
+- luislavena@gmail.com
+- aaron@tenderlovemaking.com
+- segiddins@segiddins.me
+- andre@arko.net
+- evan@phx.io
+- hsbt@ruby-lang.org
 executables:
 - update_rubygems
 extensions: []
 extra_rdoc_files:
-- CODE_OF_CONDUCT.md
-- CONTRIBUTING.rdoc
-- CVE-2013-4287.txt
-- CVE-2013-4363.txt
-- CVE-2015-3900.txt
 - History.txt
 - LICENSE.txt
 - MAINTAINERS.txt
 - MIT.txt
 - Manifest.txt
-- POLICIES.rdoc
 - README.md
-- UPGRADING.rdoc
+- UPGRADING.md
+- POLICIES.md
+- CODE_OF_CONDUCT.md
+- CONTRIBUTING.md
 - bundler/CHANGELOG.md
 - bundler/CODE_OF_CONDUCT.md
 - bundler/CONTRIBUTING.md
@@ -137,23 +140,19 @@ extra_rdoc_files:
 - bundler/README.md
 - hide_lib_for_update/note.txt
 files:
-- ".autotest"
-- ".document"
+- ".rubocop.yml"
 - ".travis.yml"
 - CODE_OF_CONDUCT.md
-- CONTRIBUTING.rdoc
-- CVE-2013-4287.txt
-- CVE-2013-4363.txt
-- CVE-2015-3900.txt
+- CONTRIBUTING.md
 - History.txt
 - LICENSE.txt
 - MAINTAINERS.txt
 - MIT.txt
 - Manifest.txt
-- POLICIES.rdoc
+- POLICIES.md
 - README.md
 - Rakefile
-- UPGRADING.rdoc
+- UPGRADING.md
 - appveyor.yml
 - bin/gem
 - bin/update_rubygems
@@ -194,6 +193,7 @@ files:
 - bundler/lib/bundler/cli/platform.rb
 - bundler/lib/bundler/cli/plugin.rb
 - bundler/lib/bundler/cli/pristine.rb
+- bundler/lib/bundler/cli/remove.rb
 - bundler/lib/bundler/cli/show.rb
 - bundler/lib/bundler/cli/update.rb
 - bundler/lib/bundler/cli/viz.rb
@@ -244,6 +244,7 @@ files:
 - bundler/lib/bundler/plugin/api.rb
 - bundler/lib/bundler/plugin/api/source.rb
 - bundler/lib/bundler/plugin/dsl.rb
+- bundler/lib/bundler/plugin/events.rb
 - bundler/lib/bundler/plugin/index.rb
 - bundler/lib/bundler/plugin/installer.rb
 - bundler/lib/bundler/plugin/installer/git.rb
@@ -400,6 +401,7 @@ files:
 - bundler/man/bundle-package.ronn
 - bundler/man/bundle-platform.ronn
 - bundler/man/bundle-pristine.ronn
+- bundler/man/bundle-remove.ronn
 - bundler/man/bundle-show.ronn
 - bundler/man/bundle-update.ronn
 - bundler/man/bundle-viz.ronn
@@ -422,6 +424,7 @@ files:
 - lib/rubygems/commands/fetch_command.rb
 - lib/rubygems/commands/generate_index_command.rb
 - lib/rubygems/commands/help_command.rb
+- lib/rubygems/commands/info_command.rb
 - lib/rubygems/commands/install_command.rb
 - lib/rubygems/commands/list_command.rb
 - lib/rubygems/commands/lock_command.rb
@@ -450,6 +453,7 @@ files:
 - lib/rubygems/config_file.rb
 - lib/rubygems/core_ext/kernel_gem.rb
 - lib/rubygems/core_ext/kernel_require.rb
+- lib/rubygems/core_ext/kernel_warn.rb
 - lib/rubygems/defaults.rb
 - lib/rubygems/dependency.rb
 - lib/rubygems/dependency_installer.rb
@@ -551,6 +555,7 @@ files:
 - lib/rubygems/resolver/stats.rb
 - lib/rubygems/resolver/vendor_set.rb
 - lib/rubygems/resolver/vendor_specification.rb
+- lib/rubygems/s3_uri_signer.rb
 - lib/rubygems/safe_yaml.rb
 - lib/rubygems/security.rb
 - lib/rubygems/security/policies.rb
@@ -571,6 +576,7 @@ files:
 - lib/rubygems/source_specific_file.rb
 - lib/rubygems/spec_fetcher.rb
 - lib/rubygems/specification.rb
+- lib/rubygems/specification_policy.rb
 - lib/rubygems/ssl_certs/.document
 - lib/rubygems/ssl_certs/rubygems.org/GlobalSignRootCA.pem
 - lib/rubygems/ssl_certs/rubygems.org/GlobalSignRootCA_R3.pem
@@ -589,6 +595,7 @@ files:
 - lib/rubygems/version.rb
 - lib/rubygems/version_option.rb
 - lib/ubygems.rb
+- rubygems-update.gemspec
 - setup.rb
 - test/rubygems/alternate_cert.pem
 - test/rubygems/alternate_cert_32.pem
@@ -606,7 +613,6 @@ files:
 - test/rubygems/encrypted_private_key.pem
 - test/rubygems/expired_cert.pem
 - test/rubygems/fake_certlib/openssl.rb
-- test/rubygems/fix_openssl_warnings.rb
 - test/rubygems/foo/discover.rb
 - test/rubygems/future_cert.pem
 - test/rubygems/future_cert_32.pem
@@ -658,6 +664,7 @@ files:
 - test/rubygems/test_gem_commands_fetch_command.rb
 - test/rubygems/test_gem_commands_generate_index_command.rb
 - test/rubygems/test_gem_commands_help_command.rb
+- test/rubygems/test_gem_commands_info_command.rb
 - test/rubygems/test_gem_commands_install_command.rb
 - test/rubygems/test_gem_commands_list_command.rb
 - test/rubygems/test_gem_commands_lock_command.rb
@@ -774,10 +781,13 @@ files:
 - test/rubygems/wrong_key_cert_32.pem
 - util/CL2notes
 - util/ci
+- util/cops/deprecations.rb
 - util/create_certs.rb
+- util/create_certs.sh
 - util/create_encrypted_key.rb
 - util/generate_spdx_license_list.rb
 - util/patch_with_prs.rb
+- util/rubocop
 - util/update_bundled_ca_certificates.rb
 - util/update_changelog.rb
 homepage: https://rubygems.org
@@ -796,7 +806,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 1.8.7
+      version: 2.3.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
@@ -807,5 +817,5 @@ rubyforge_project:
 rubygems_version: 2.7.6.2
 signing_key:
 specification_version: 4
-summary: ''
+summary: RubyGems is a package management framework for Ruby.
 test_files: []

data/.autotest

@@ -1,71 +0,0 @@
-# -*- ruby -*-
-
-Gem.refresh
-
-require 'autotest/restart'
-require 'autotest/isolate'
-
-Autotest.add_hook :run_command do |_, cmd|
-  cmd.sub! ' -e ', ' -we '
-end
-
-Autotest.add_hook :initialize do |at|
-  at.testlib = ''
-
-  at.failed_results_re = /^\s+\d+\) (?:Failure|Error):\n(.*?):/
-  at.completed_re = /\d+ tests, \d+ assertions, \d+ failures, \d+ errors/
-
-  at.add_exception %r%/\.git/%
-  at.add_exception %r%\.rbc$%
-  at.add_exception %r%test/rubygems/rubygems%
-
-  at.find_directories.clear
-  at.find_directories.push 'lib', 'test'
-
-  at.add_mapping %r%^lib/rubygems.rb$% do |_, m|
-    "test/rubygems/test_gem.rb"
-  end
-
-  at.add_mapping %r%^lib/rubygems/(.*).rb$% do |_, m|
-    "test/rubygems/test_gem_#{m[1].gsub '/', '_'}.rb"
-  end
-
-  args = ARGV.reject { |a| a =~ /^-/ }
-  at.find_directories = args unless args.empty?
-
-  def at.handle_results results
-    results = results.gsub(/\e\[\d+m/, '') # strip ascii color
-    failed = results.scan(self.failed_results_re).map { |m, k|
-      /(?<k>\w+)#(?<m>\w+)/ =~ m
-      [m, k]
-    }
-
-    completed = results[self.completed_re]
-
-    if completed then
-      completed = completed.scan(/(\d+) (\w+)/).map { |v, k| [k, v.to_i] }
-
-      self.latest_results = Hash[*completed.flatten]
-      self.files_to_test  = consolidate_failures failed
-
-      color = failed.empty? ? :green : :red
-      hook color unless $TESTING
-    else
-      self.latest_results = nil
-    end
-
-    self.tainted = true unless self.files_to_test.empty?
-  end
-
-  def at.path_to_classname s
-    sep = File::SEPARATOR
-
-    f = s.sub(/^test#{sep}rubygems#{sep}/, '').sub(/\.rb$/, '').split sep
-
-    f = f.map { |path| path.split(/_|(\d+)/).map { |seg| seg.capitalize }.join }
-
-    f.join('::').
-      gsub('Rdoc', 'RDoc').
-      gsub('GemDependencyApi', 'GemDependencyAPI')
-  end
-end

data/.document

@@ -1,5 +0,0 @@
-README
-LICENSE.txt
-GPL.txt
-lib
-release_notes

data/CONTRIBUTING.rdoc

@@ -1,130 +0,0 @@
-= How to contribute
-
-Community involvement is essential to RubyGems. We want to keep it as easy
-as possible to contribute changes. There are a few guidelines that we need
-contributors to follow to reduce the time it takes to get changes merged in.
-
-== Guidelines
-
-1. New features should be coupled with tests.
-
-2. Ensure that your code blends well with ours:
-   * No trailing whitespace
-   * Match indentation (two spaces)
-   * Match coding style (+if+, +elsif+, +when+ need trailing +then+)
-
-3. If any new files are added or existing files removed in a commit or PR, please update the +Manifest.txt+ accordingly.
-
-4. Don't modify the history file or version number.
-
-5. If you have any questions, just ask on IRC in #rubygems on Freenode or file
-   an issue here: http://github.com/rubygems/rubygems/issues
-
-For more information and ideas on how to contribute to RubyGems ecosystem, see
-here: http://guides.rubygems.org/contributing/
-
-== Getting Started
-
-    $ gem install hoe
-    $ rake newb
-
-To run commands like <tt>gem install</tt> from the repo:
-
-    $ ruby -Ilib bin/gem install
-
-== Issues
-
-RubyGems uses labels to track all issues and pull requests. In order to provide
-guidance to the community this is documentation of how labels are used in the
-rubygems repository.
-
-=== Contribution
-
-These labels are made to guide contributors to issue/pull requests that they
-can help with. That are marked with a light gray <tt>contribution: *</tt>
-
-* *small* - The issue described here will take a small amount of work to resolve,
-  and is a good option for a new contributor
-* *unclaimed* - The issue has not been claimed for work, and is awaiting willing
-  volunteers!
-
-=== Type
-
-Most Issues or pull requests will have a light green <tt>type: *</tt> label, 
-which describes the type of the issue or pull request.
-
-* <b>bug report</b> - An issue describing a bug in rubygems. This would be something
-  that is broken, confusing, unexpected behavior etc.
-* <b>bug fix</b> - A pull request that fixes a bug report.
-* <b>feature request</b> - An issue describing a request for a new feature or
-  enhancement.
-* <b>feature implementation</b> - A pull request implementing a feature request.
-* *question* - An issue that is a more of a question than a call for specific
-  changes in the codebase.
-* *cleanup* - Generally for a pull request that improves the code base without
-  fixing a bug or implementing a feature.
-* <b>major bump</b> - This issue or pull request requires a major version bump
-* *administrative* - This issue relates to administrative tasks that need to
-  take place as it relates to rubygems
-* *documentation* - This issue relates to improving the documentation for
-  in this repo. Note that much of the rubygems documentation is here:
-  https://github.com/rubygems/guides
-
-=== Workflow / Status
-
-The light yellow <tt>status: *</tt> labels that indicate the state of an 
-issue, where it is in the process from being submitted to being closed. 
-These are listed in rough  progression order from submitted to closed.
-
-* *triage* - This is an issue or pull request that needs to be properly
-  labeled by by a maintainer.
-* *confirmed* - This issue/pull request has been accepted as valid, but
-  is not yet immediately ready for work.
-* <b>ready</b> - An issue that is available for collaboration. This issue
-  should have existing discussion on the problem, and a description of how to go
-  about solving it.
-* <b>working</b> - An issue that has a specific invidual assigned to and planning
-  to do work on it.
-* <b>user feedback required</b> - The issue/pull request is blocked pending more
-  feedback from an end user
-* <b>blocked / backlog</b> - the issue/pull request is currently unable to move forward
-  because of some specific reason, generally this will be a reason that is outside
-  RubyGems or needs feedback from some specific individual or group, and it may
-  be a while before something it is resolved.
-
-=== Closed Reason
-
-Reasons are why an issue / pull request was closed without being worked on or
-accepted. There should also be more detailed information in the comments. The
-closed reason labels are maroon <tt>closed: *</tt>.
-
-* *duplicate* - This is a duplicate of an existing bug. The comments must
-  reference the existing issue.
-* *abandonded* - This is an issue/pull request that has aged off, is no longer
-  applicable or similar.
-* *declined* - An issue that won't be fixed/implemented or a pull request that
-  is not accepted.
-* *deprecated* - An issue/pull request that no longer applies to the actively
-  maintained codebase.
-* *discussion* - An issue/pull that is no longer about a concrete change, and
-  is instead being used for discussion.
-
-=== Categories
-
-These are aspects of the codebase, or what general area the issue or pull
-request pertains too. Not all issues will have a category. All categorized
-issues have a blue <tt>category: *</tt> label.
-
-* *gemspec* - related to the gem specification itself
-* *API* - related to the public supported rubygems API. This is the code API,
-  not a network related API.
-* *command* - related to something in <tt>Gem::Commands</tt>
-* *install* - related to gem installations
-* *documentation* - related to updating / fixing / clarifying documentation or
-  guides
-
-=== Platforms
-
-If an issue or pull request pertains to only one platform, then it should have
-an appropriate purple <tt>platform: *</tt> label. Current platform labels:
-*windows*, *java*, *osx*, *linux*

data/CVE-2013-4287.txt

@@ -1,35 +0,0 @@
-= Algorithmic complexity vulnerability in RubyGems 2.0.7 and older
-
-RubyGems validates versions with a regular expression that is vulnerable to
-denial of service due to backtracking.  For specially crafted RubyGems
-versions attackers can cause denial of service through CPU consumption.
-
-RubyGems versions 2.0.7 and older, 2.1.0.rc.1 and 2.1.0.rc.2 are vulnerable.
-
-Ruby versions 1.9.0 through 2.0.0p247 are vulnerable as they contain embedded
-versions of RubyGems.
-
-It does not appear to be possible to exploit this vulnerability by installing a
-gem for RubyGems 1.8.x or 2.0.x.  Vulnerable uses of RubyGems API include
-packaging a gem (through `gem build`, Gem::Package or Gem::PackageTask),
-sending user input to Gem::Version.new, Gem::Version.correct? or use of the
-Gem::Version::VERSION_PATTERN or Gem::Version::ANCHORED_VERSION_PATTERN
-constants.
-
-Notably, users of bundler that install gems from git are vulnerable if a
-malicious author changes the gemspec to an invalid version.
-
-The vulnerability can be fixed by changing the first grouping to an atomic
-grouping in Gem::Version::VERSION_PATTERN in lib/rubygems/version.rb.  For
-RubyGems 2.0.x:
-
-  -  VERSION_PATTERN = '[0-9]+(\.[0-9a-zA-Z]+)*(-[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?' # :nodoc:
-  +  VERSION_PATTERN = '[0-9]+(?>\.[0-9a-zA-Z]+)*(-[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?' # :nodoc:
-
-For RubyGems 1.8.x:
-
-  -  VERSION_PATTERN = '[0-9]+(\.[0-9a-zA-Z]+)*' # :nodoc:
-  +  VERSION_PATTERN = '[0-9]+(?>\.[0-9a-zA-Z]+)*' # :nodoc:
-
-This vulnerability was discovered by Damir Sharipov <dammer2k@gmail.com>
-

data/CVE-2013-4363.txt

@@ -1,45 +0,0 @@
-= Algorithmic complexity vulnerability in RubyGems 2.1.4 and older
-
-The patch for CVE-2013-4287 was insufficiently verified so the combined
-regular expression for verifying gem version remains vulnerable following
-CVE-2013-4287.
-
-RubyGems validates versions with a regular expression that is vulnerable to
-denial of service due to backtracking.  For specially crafted RubyGems
-versions attackers can cause denial of service through CPU consumption.
-
-RubyGems versions 2.1.4 and older are vulnerable.
-
-Ruby versions 1.9.0 through 2.0.0p247 are vulnerable as they contain embedded
-versions of RubyGems.
-
-It does not appear to be possible to exploit this vulnerability by installing a
-gem for RubyGems 1.8.x or newer.  Vulnerable uses of RubyGems API include
-packaging a gem (through `gem build`, Gem::Package or Gem::PackageTask),
-sending user input to Gem::Version.new, Gem::Version.correct? or use of the
-Gem::Version::VERSION_PATTERN or Gem::Version::ANCHORED_VERSION_PATTERN
-constants.
-
-Notably, users of bundler that install gems from git are vulnerable if a
-malicious author changes the gemspec to an invalid version.
-
-The vulnerability can be fixed by changing the "*" repetition to a "?"
-repetition in Gem::Version::ANCHORED_VERSION_PATTERN in
-lib/rubygems/version.rb.  For RubyGems 2.1.x:
-
-  -  ANCHORED_VERSION_PATTERN = /\A\s*(#{VERSION_PATTERN})*\s*\z/ # :nodoc:
-  +  ANCHORED_VERSION_PATTERN = /\A\s*(#{VERSION_PATTERN})?\s*\z/ # :nodoc:
-
-For RubyGems 2.0.x:
-
-  -  ANCHORED_VERSION_PATTERN = /\A\s*(#{VERSION_PATTERN})*\s*\z/ # :nodoc:
-  +  ANCHORED_VERSION_PATTERN = /\A\s*(#{VERSION_PATTERN})?\s*\z/ # :nodoc:
-
-For RubyGems 1.8.x:
-
-  -  ANCHORED_VERSION_PATTERN = /\A\s*(#{VERSION_PATTERN})*\s*\z/ # :nodoc:
-  +  ANCHORED_VERSION_PATTERN = /\A\s*(#{VERSION_PATTERN})?\s*\z/ # :nodoc:
-
-
-This vulnerability was discovered by Alexander Cherepanov <cherepan@mccme.ru>
-

data/CVE-2015-3900.txt

@@ -1,40 +0,0 @@
-= Request hijacking vulnerability in RubyGems 2.4.6 and earlier
-
-RubyGems provides the ability of a domain to direct clients to a separate
-host that is used to fetch gems and make API calls against. This mechanism
-is implemented via DNS, specificly a SRV record _rubygems._tcp under the
-original requested domain.
-
-For example, this is the one that users who use rubygems.org see:
-
-  > dig _rubygems._tcp.rubygems.org SRV
-
-  ;; ANSWER SECTION:
-  _rubygems._tcp.rubygems.org. 600 IN	SRV	0 1 80 api.rubygems.org.
-
-RubyGems did not validate the hostname returned in the SRV record before
-sending requests to it.
-
-This left clients open to a DNS hijack attack, whereby an attacker could
-return a SRV of their choosing and get the client to use it. For example:
-
-  > dig _rubygems._tcp.rubygems.org SRV
-
-  ;; ANSWER SECTION:
-  _rubygems._tcp.rubygems.org. 600 IN	SRV	0 1 80 gems.nottobetrusted.wtf
-
-The fix, detailed at https://github.com/rubygems/rubygems/commit/6bbee35,
-shows that we validate the record now to be under the original domain. This
-restricts the client to be using the original trust/security domain as they
-would have otherwise.
-
-RubyGems versions between 2.0 and 2.4.6 are vulnerable.
-
-RubyGems version 2.0.16, 2.2.4, and 2.4.7 have been released that fix this
-issue.
-
-Ruby versions 1.9.0 through 2.2.0 are vulnerable as they contain embedded
-versions of RubyGems.
-
-This vulnerability was reported by Jonathan Claudius <JClaudius@trustwave.com>.
-