rubygems-update 3.0.2 → 3.0.3

data/test/rubygems/test_gem_package.rb

@@ -529,6 +529,40 @@ class TestGemPackage < Gem::Package::TarTestCase
     end
   end
 
+  def test_extract_symlink_parent_doesnt_delete_user_dir
+    package = Gem::Package.new @gem
+
+    # Extract into a subdirectory of @destination; if this test fails it writes
+    # a file outside destination_subdir, but we want the file to remain inside
+    # @destination so it will be cleaned up.
+    destination_subdir = File.join @destination, 'subdir'
+    FileUtils.mkdir_p destination_subdir
+
+    destination_user_dir = File.join @destination, 'user'
+    destination_user_subdir = File.join destination_user_dir, 'dir'
+    FileUtils.mkdir_p destination_user_subdir
+
+    tgz_io = util_tar_gz do |tar|
+      tar.add_symlink 'link', destination_user_dir, 16877
+      tar.add_symlink 'link/dir', '.', 16877
+    end
+
+    e = assert_raises(Gem::Package::PathError, Errno::EACCES) do
+      package.extract_tar_gz tgz_io, destination_subdir
+    end
+
+    assert_path_exists destination_user_subdir
+
+    if Gem::Package::PathError === e
+      assert_equal("installing into parent path #{destination_user_subdir} of " +
+                  "#{destination_subdir} is not allowed", e.message)
+    elsif win_platform?
+      skip "symlink - must be admin with no UAC on Windows"
+    else
+      raise e
+    end
+  end
+
   def test_extract_tar_gz_directory
     package = Gem::Package.new @gem
 

data/test/rubygems/test_gem_text.rb

@@ -89,4 +89,9 @@ Without the wrapping, the text might not look good in the RSS feed.
     s = "ab" * 500_001
     assert_equal "Truncating desc to 1,000,000 characters:\n#{s[0, 1_000_000]}", truncate_text(s, "desc", 1_000_000)
   end
+
+  def test_clean_text
+    assert_equal ".]2;nyan.", clean_text("\e]2;nyan\a")
+  end
+
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rubygems-update
 version: !ruby/object:Gem::Version
-  version: 3.0.2
+  version: 3.0.3
 platform: ruby
 authors:
 - Jim Weirich
@@ -16,7 +16,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-01-01 00:00:00.000000000 Z
+date: 2019-03-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: builder
@@ -139,6 +139,30 @@ extra_rdoc_files:
 - bundler/LICENSE.md
 - bundler/README.md
 - hide_lib_for_update/note.txt
+- bundler/man/bundle-platform.1
+- bundler/man/bundle-update.1
+- bundler/man/bundle-info.1
+- bundler/man/bundle-init.1
+- bundler/man/bundle.1
+- bundler/man/bundle-exec.1
+- bundler/man/bundle-install.1
+- bundler/man/bundle-list.1
+- bundler/man/bundle-outdated.1
+- bundler/man/bundle-check.1
+- bundler/man/bundle-show.1
+- bundler/man/bundle-gem.1
+- bundler/man/bundle-open.1
+- bundler/man/bundle-lock.1
+- bundler/man/bundle-pristine.1
+- bundler/man/bundle-remove.1
+- bundler/man/bundle-doctor.1
+- bundler/man/bundle-binstubs.1
+- bundler/man/bundle-viz.1
+- bundler/man/bundle-package.1
+- bundler/man/bundle-add.1
+- bundler/man/bundle-config.1
+- bundler/man/bundle-clean.1
+- bundler/man/bundle-inject.1
 files:
 - ".rubocop.yml"
 - ".travis.yml"
@@ -382,29 +406,53 @@ files:
 - bundler/lib/bundler/vlad.rb
 - bundler/lib/bundler/worker.rb
 - bundler/lib/bundler/yaml_serializer.rb
+- bundler/man/bundle-add.1
 - bundler/man/bundle-add.ronn
+- bundler/man/bundle-binstubs.1
 - bundler/man/bundle-binstubs.ronn
+- bundler/man/bundle-check.1
 - bundler/man/bundle-check.ronn
+- bundler/man/bundle-clean.1
 - bundler/man/bundle-clean.ronn
+- bundler/man/bundle-config.1
 - bundler/man/bundle-config.ronn
+- bundler/man/bundle-doctor.1
 - bundler/man/bundle-doctor.ronn
+- bundler/man/bundle-exec.1
 - bundler/man/bundle-exec.ronn
+- bundler/man/bundle-gem.1
 - bundler/man/bundle-gem.ronn
+- bundler/man/bundle-info.1
 - bundler/man/bundle-info.ronn
+- bundler/man/bundle-init.1
 - bundler/man/bundle-init.ronn
+- bundler/man/bundle-inject.1
 - bundler/man/bundle-inject.ronn
+- bundler/man/bundle-install.1
 - bundler/man/bundle-install.ronn
+- bundler/man/bundle-list.1
 - bundler/man/bundle-list.ronn
+- bundler/man/bundle-lock.1
 - bundler/man/bundle-lock.ronn
+- bundler/man/bundle-open.1
 - bundler/man/bundle-open.ronn
+- bundler/man/bundle-outdated.1
 - bundler/man/bundle-outdated.ronn
+- bundler/man/bundle-package.1
 - bundler/man/bundle-package.ronn
+- bundler/man/bundle-platform.1
 - bundler/man/bundle-platform.ronn
+- bundler/man/bundle-pristine.1
 - bundler/man/bundle-pristine.ronn
+- bundler/man/bundle-remove.1
 - bundler/man/bundle-remove.ronn
+- bundler/man/bundle-show.1
 - bundler/man/bundle-show.ronn
+- bundler/man/bundle-update.1
 - bundler/man/bundle-update.ronn
+- bundler/man/bundle-viz.1
 - bundler/man/bundle-viz.ronn
+- bundler/man/bundle.1
 - bundler/man/bundle.ronn
 - bundler/man/gemfile.5.ronn
 - hide_lib_for_update/note.txt
@@ -811,7 +859,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.1
+rubygems_version: 3.1.0.pre1
 signing_key: 
 specification_version: 4
 summary: RubyGems is a package management framework for Ruby.