[DRE-maint] Bug#999901: ruby-rubygems: artefact files in the package?

wim wim.bertels at ucll.be
Thu Nov 18 08:39:20 GMT 2021


Package: ruby-rubygems
Version: 3.2.5-2
Severity: minor
X-Debbugs-Cc: wim.bertels at ucll.be

Hello,

chkrootkit reports the following file as suspect,
while this is most likely a false positive, they also seem to be unnecessary

The file:
 /usr/lib/ruby/vendor_ruby/rubygems/ssl_certs/.document

Also when looking at /usr/lib/ruby/vendor_ruby/rubygems/ssl_certs/rubygems.org/
it strange to see that rubygems probably isn't using the trusted system wide ca-certificates for verification
(similar issue in the past: #689069)

hth,
Wim


-- System Information:
Debian Release: 11.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-9-amd64 (SMP w/16 CPU threads)
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8), LANGUAGE=nl_BE:nl
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages ruby-rubygems depends on:
ii  ruby  1:2.7+2

ruby-rubygems recommends no packages.

ruby-rubygems suggests no packages.

-- no debconf information



More information about the Pkg-ruby-extras-maintainers mailing list