[DRE-maint] Bug#1018151: buster-pu: package ruby-http-parser.rb/0.6.0-4+deb10u1

Adrian Bunk bunk at debian.org
Thu Aug 25 22:52:25 BST 2022


Package: release.debian.org
Severity: normal
Tags: buster
User: release.debian.org at packages.debian.org
Usertags: pu
X-Debbugs-Cc: Debian Ruby Extras Maintainers <pkg-ruby-extras-maintainers at lists.alioth.debian.org>

  * Relax "post identity body world" test to fix FTBFS with the
    CVE-2019-15605 fix in http-parser. (Closes: #977750)
-------------- next part --------------
diff -Nru ruby-http-parser.rb-0.6.0/debian/changelog ruby-http-parser.rb-0.6.0/debian/changelog
--- ruby-http-parser.rb-0.6.0/debian/changelog	2017-11-16 00:15:54.000000000 +0200
+++ ruby-http-parser.rb-0.6.0/debian/changelog	2022-08-25 21:52:11.000000000 +0300
@@ -1,3 +1,11 @@
+ruby-http-parser.rb (0.6.0-4+deb10u1) buster; urgency=medium
+
+  * Non-maintainer upload.
+  * Relax "post identity body world" test to fix FTBFS with the
+    CVE-2019-15605 fix in http-parser. (Closes: #977750)
+
+ -- Adrian Bunk <bunk at debian.org>  Thu, 25 Aug 2022 21:52:11 +0300
+
 ruby-http-parser.rb (0.6.0-4) unstable; urgency=medium
 
   * Team upload
diff -Nru ruby-http-parser.rb-0.6.0/debian/patches/0007-disable-identity-transfer-encoding-test.patch ruby-http-parser.rb-0.6.0/debian/patches/0007-disable-identity-transfer-encoding-test.patch
--- ruby-http-parser.rb-0.6.0/debian/patches/0007-disable-identity-transfer-encoding-test.patch	1970-01-01 02:00:00.000000000 +0200
+++ ruby-http-parser.rb-0.6.0/debian/patches/0007-disable-identity-transfer-encoding-test.patch	2022-08-25 21:51:48.000000000 +0300
@@ -0,0 +1,21 @@
+Subject: Relax "post identity body world" test
+Author: Christoph Biedl <debian.axhn at manchmal.in-ulm.de>
+Date: 2020-12-20
+Bug: https://github.com/tmm1/http_parser.rb/issues/68
+Bug-Debian: https://bugs.debian.org/977750
+
+    Technically, disabling "strict" causes the entire test to be
+    skipped. Perhaps some day upstream might implement the lenient
+    mode.
+
+--- a/spec/support/requests.json
++++ b/spec/support/requests.json
+@@ -162,7 +162,7 @@
+       "Content-Length": "5"
+     },
+     "body": "World",
+-    "strict": true
++    "strict": false
+   },
+   {
+     "name": "post - chunked body: all your base are belong to us",
diff -Nru ruby-http-parser.rb-0.6.0/debian/patches/series ruby-http-parser.rb-0.6.0/debian/patches/series
--- ruby-http-parser.rb-0.6.0/debian/patches/series	2017-11-16 00:15:54.000000000 +0200
+++ ruby-http-parser.rb-0.6.0/debian/patches/series	2022-08-25 21:52:01.000000000 +0300
@@ -4,3 +4,4 @@
 0004-Do-not-overload-loadpath.patch
 0005-tweak-to-support-rspec3.patch
 0006-disable-folding-header-test.patch
+0007-disable-identity-transfer-encoding-test.patch


More information about the Pkg-ruby-extras-maintainers mailing list