[Bug 250731] lang/jruby: File.stat and File.lstat return incorrect values

2021-02-24 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250731

Thomas Hurst  changed:

   What|Removed |Added

 CC||t...@hur.st

--- Comment #1 from Thomas Hurst  ---
This was fixed several years ago - https://github.com/jnr/jnr-posix/issues/126


9.2.16.0 should be out today, be a good time to update the port.  Until then it
should be marked BROKEN on 12+.

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-ruby@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ruby
To unsubscribe, send any mail to "freebsd-ruby-unsubscr...@freebsd.org"


[Bug 250731] lang/jruby: File.stat and File.lstat return incorrect values

2021-02-24 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250731

--- Comment #2 from Thomas Hurst  ---
9.2.15.0, rather.

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-ruby@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ruby
To unsubscribe, send any mail to "freebsd-ruby-unsubscr...@freebsd.org"


[Bug 253822] lang/jruby: Update to 9.2.15.0

2021-02-24 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=253822

Bug ID: 253822
   Summary: lang/jruby: Update to 9.2.15.0
   Product: Ports & Packages
   Version: Latest
  Hardware: Any
OS: Any
Status: New
  Severity: Affects Only Me
  Priority: ---
 Component: Individual Port(s)
  Assignee: r...@freebsd.org
  Reporter: t...@hur.st
 Flags: maintainer-feedback?(r...@freebsd.org)
  Assignee: r...@freebsd.org

Created attachment 222797
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=222797&action=edit
Patch lang/jruby to 9.2.15.0

This includes fixes for various security issues, in particular:

* CVE-2011-4815 (predictable hashing DoS)
* CVE-2017-17742, CVE-2019-16254, CVE-2020-25613 (WeBrick request
smuggling/splitting)
* CVE-2017-18640 (SnakeYAML entity expansion DoS)

As well as fixes for File.stat/lstat on FreeBSD 12 and later, which previously
rendered JRuby unusable on these systems.

Port passes portlint and poudriere testport.

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-ruby@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ruby
To unsubscribe, send any mail to "freebsd-ruby-unsubscr...@freebsd.org"


maintainer-feedback requested: [Bug 253822] lang/jruby: Update to 9.2.15.0

2021-02-24 Thread bugzilla-noreply
Bugzilla Automation  has asked freebsd-ruby (Nobody)
 for maintainer-feedback:
Bug 253822: lang/jruby: Update to 9.2.15.0
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=253822



--- Description ---
This includes fixes for various security issues, in particular:

* CVE-2011-4815 (predictable hashing DoS)
* CVE-2017-17742, CVE-2019-16254, CVE-2020-25613 (WeBrick request
smuggling/splitting)
* CVE-2017-18640 (SnakeYAML entity expansion DoS)

As well as fixes for File.stat/lstat on FreeBSD 12 and later, which previously
rendered JRuby unusable on these systems.

Port passes portlint and poudriere testport.
___
freebsd-ruby@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ruby
To unsubscribe, send any mail to "freebsd-ruby-unsubscr...@freebsd.org"


[Bug 253822] lang/jruby: Update to 9.2.15.0

2021-02-24 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=253822

Thomas Hurst  changed:

   What|Removed |Added

 Blocks||250731
   Severity|Affects Only Me |Affects Some People


Referenced Bugs:

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250731
[Bug 250731] lang/jruby: File.stat and File.lstat return incorrect values
-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-ruby@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ruby
To unsubscribe, send any mail to "freebsd-ruby-unsubscr...@freebsd.org"


[Bug 250731] lang/jruby: File.stat and File.lstat return incorrect values

2021-02-24 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250731

Thomas Hurst  changed:

   What|Removed |Added

 Depends on||253822


Referenced Bugs:

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=253822
[Bug 253822] lang/jruby: Update to 9.2.15.0
-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-ruby@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ruby
To unsubscribe, send any mail to "freebsd-ruby-unsubscr...@freebsd.org"


[Bug 253828] security/vuxml: Update vulnerabilities in ruby, jruby

2021-02-24 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=253828

Li-Wen Hsu  changed:

   What|Removed |Added

 CC||lw...@freebsd.org,
   ||r...@freebsd.org
 Status|New |Open

--- Comment #1 from Li-Wen Hsu  ---
Also add maintainers because everyone is welcomed to update vuxml, and more
encouraged by the maintainers.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
freebsd-ruby@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ruby
To unsubscribe, send any mail to "freebsd-ruby-unsubscr...@freebsd.org"