[ruby-core:96243] [Ruby master Bug#16279] Backport 463092b8

[email protected] Sun, 15 Dec 2019 07:21:04 +0000 (UTC)

Newsgroups	gmane.comp.lang.ruby.core
Message-ID	<redmine.journal-83135.20191215072104.ac692b092803a2f0@ruby-lang.org>

Issue #16279 has been updated by nagachika (Tomoyuki Chikanaga).

Backport changed from 2.5: REQUIRED, 2.6: REQUIRED to 2.5: REQUIRED, 2.6: DONE

ruby_2_6 r67833 merged revision(s) 463092b84da7933f307cc8747f948f68ef19f5fd.

----------------------------------------
Bug #16279: Backport 463092b8
https://bugs.ruby-lang.org/issues/16279#change-83135

* Author: twk3 (DJ Mountney)
* Status: Closed
* Priority: Normal
* Assignee: hsbt (Hiroshi SHIBATA)
* Target version: 
* ruby -v: 
* Backport: 2.5: REQUIRED, 2.6: DONE
----------------------------------------
Please backport the rake 12.3.3 update into the stable releases 

rev: 463092b84da7933f307cc8747f948f68ef19f5fd

This patch resolves a public disclosed minor security issue: https://hackerone.com/reports/651518

And causes the current version of ruby to fail security scanning tests.



-- 
https://bugs.ruby-lang.org/

Unsubscribe: <mailto:[email protected]?subject=unsubscribe>
<http://lists.ruby-lang.org/cgi-bin/mailman/options/ruby-core>