ruby/backport-0004-CVE-2024-35221.patch
shixuantong 9f8fa5c321 fix CVE-2024-35221
(cherry picked from commit 34f44629e9ba1167cfcf03edeae24b819162072d)
2024-06-18 14:25:05 +08:00

38 lines
1.1 KiB
Diff

From 997470b7b697d267109571d81081453acc73a2f9 Mon Sep 17 00:00:00 2001
From: Samuel Giddins <segiddins@segiddins.me>
Date: Wed, 14 Feb 2024 00:50:52 -0800
Subject: [PATCH] [rubygems/rubygems] Commit missing new method
https://github.com/rubygems/rubygems/commit/5265b4ce3d
Reference:https://github.com/ruby/ruby/commit/997470b7b697d267109571d81081453acc73a2f9
Conflict:NA
---
lib/rubygems/safe_yaml.rb | 6 +++++-
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/lib/rubygems/safe_yaml.rb b/lib/rubygems/safe_yaml.rb
index 9cf7c13..5f710b4 100644
--- a/lib/rubygems/safe_yaml.rb
+++ b/lib/rubygems/safe_yaml.rb
@@ -25,10 +25,14 @@ module Gem
].freeze
@aliases_enabled = true
- def self.aliases_enabled=(value)
+ def self.aliases_enabled=(value) # :nodoc:
@aliases_enabled = !!value
end
+ def self.aliases_enabled? # :nodoc:
+ @aliases_enabled
+ end
+
def self.safe_load(input)
::YAML.safe_load(input, permitted_classes: PERMITTED_CLASSES, permitted_symbols: PERMITTED_SYMBOLS, aliases: @aliases_enabled)
end
--
2.33.0