[DRE-maint] Bug#1030966: ruby-jekyll-remote-theme accesses the internet during the build
Adrian Bunk
bunk at debian.org
Fri Feb 10 01:23:52 GMT 2023
Source: ruby-jekyll-remote-theme
Version: 0.4.3-3
Severity: serious
Tags: ftbfs
https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/ruby-jekyll-remote-theme.html
...
2) Jekyll::RemoteTheme::Munger with a malicious theme requires whitelisted plugins
Failure/Error:
http.request(request) do |response|
raise_unless_sucess(response)
enforce_max_file_size(response.content_length)
response.read_body do |chunk|
zip_file.write chunk
end
end
SocketError:
Failed to open TCP connection to codeload.github.com:443 (getaddrinfo: Temporary failure in name resolution)
...
Failed examples:
rspec ./spec/jekyll-remote-theme/munger_spec.rb:127 # Jekyll::RemoteTheme::Munger with a malicious theme doesn't require malicious plugins
rspec ./spec/jekyll-remote-theme/munger_spec.rb:122 # Jekyll::RemoteTheme::Munger with a malicious theme requires whitelisted plugins
rspec ./spec/jekyll-remote-theme/munger_spec.rb:116 # Jekyll::RemoteTheme::Munger with a malicious theme sets the theme
rspec ./spec/jekyll-remote-theme/munger_spec.rb:99 # Jekyll::RemoteTheme::Munger with a remote theme requires plugins
rspec ./spec/jekyll-remote-theme/munger_spec.rb:93 # Jekyll::RemoteTheme::Munger with a remote theme sets layouts
rspec ./spec/jekyll-remote-theme/munger_spec.rb:73 # Jekyll::RemoteTheme::Munger with a remote theme downloads
rspec ./spec/jekyll-remote-theme/munger_spec.rb:89 # Jekyll::RemoteTheme::Munger with a remote theme sets include paths
rspec ./spec/jekyll-remote-theme/munger_spec.rb:67 # Jekyll::RemoteTheme::Munger with a remote theme sets the theme
rspec ./spec/jekyll-remote-theme/munger_spec.rb:77 # Jekyll::RemoteTheme::Munger with a remote theme sets sass paths
rspec ./spec/jekyll_remote_theme_spec.rb:13 # Jekyll::RemoteTheme inits
...
More information about the Pkg-ruby-extras-maintainers
mailing list