]> code.ossystems Code Review - openembedded-core.git/commit
ruby: drop long-merged CVE patches
authorAndré Draszik <andre.draszik@jci.com>
Tue, 1 Oct 2019 09:54:49 +0000 (10:54 +0100)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 2 Oct 2019 09:09:28 +0000 (10:09 +0100)
commit90dbe9019c81e25923ed450df80b4401d16287b4
treecfb94339b28d257ce2322a6a15fcd688cdb9053a
parentf5bb06129391b62f7dff400f10a0b4d2934625d2
ruby: drop long-merged CVE patches

The CVE patches here address the original problem in
a different way to how upstream solved it, and are
superfluous.

Ruby updated to Onigmo v6.1.3+669ac999761 before its
v2.5.0 release, and both CVEs were fixed before Onigmo
v6.1.3:
    https://github.com/k-takata/Onigmo/releases/tag/Onigmo-6.1.3
    https://github.com/k-takata/Onigmo/commits/Onigmo-6.1.3
        https://github.com/k-takata/Onigmo/commit/40945546578004bf40e6f884834bcad4054c70f7
        https://github.com/k-takata/Onigmo/commit/783b7ef491e1422e4be7407ccc3e4305e5013507

Because the issues were fixed differently here and
in Ruby (Onigmo), patch never complained about
duplicatation during recipe updates.

Signed-off-by: André Draszik <andre.draszik@jci.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
meta/recipes-devtools/ruby/ruby/ruby-CVE-2017-9226.patch [deleted file]
meta/recipes-devtools/ruby/ruby/ruby-CVE-2017-9228.patch [deleted file]
meta/recipes-devtools/ruby/ruby_2.5.5.bb