[DRE-maint] Bug#1030966: ruby-jekyll-remote-theme accesses the internet during the build

Adrian Bunk bunk at debian.org
Fri Feb 10 01:23:52 GMT 2023


Source: ruby-jekyll-remote-theme
Version: 0.4.3-3
Severity: serious
Tags: ftbfs

https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/ruby-jekyll-remote-theme.html

...
2) Jekyll::RemoteTheme::Munger with a malicious theme requires whitelisted plugins
     Failure/Error:
       http.request(request) do |response|
         raise_unless_sucess(response)
         enforce_max_file_size(response.content_length)
         response.read_body do |chunk|
           zip_file.write chunk
         end
       end

     SocketError:
       Failed to open TCP connection to codeload.github.com:443 (getaddrinfo: Temporary failure in name resolution)
...
Failed examples:

rspec ./spec/jekyll-remote-theme/munger_spec.rb:127 # Jekyll::RemoteTheme::Munger with a malicious theme doesn't require malicious plugins
rspec ./spec/jekyll-remote-theme/munger_spec.rb:122 # Jekyll::RemoteTheme::Munger with a malicious theme requires whitelisted plugins
rspec ./spec/jekyll-remote-theme/munger_spec.rb:116 # Jekyll::RemoteTheme::Munger with a malicious theme sets the theme
rspec ./spec/jekyll-remote-theme/munger_spec.rb:99 # Jekyll::RemoteTheme::Munger with a remote theme requires plugins
rspec ./spec/jekyll-remote-theme/munger_spec.rb:93 # Jekyll::RemoteTheme::Munger with a remote theme sets layouts
rspec ./spec/jekyll-remote-theme/munger_spec.rb:73 # Jekyll::RemoteTheme::Munger with a remote theme downloads
rspec ./spec/jekyll-remote-theme/munger_spec.rb:89 # Jekyll::RemoteTheme::Munger with a remote theme sets include paths
rspec ./spec/jekyll-remote-theme/munger_spec.rb:67 # Jekyll::RemoteTheme::Munger with a remote theme sets the theme
rspec ./spec/jekyll-remote-theme/munger_spec.rb:77 # Jekyll::RemoteTheme::Munger with a remote theme sets sass paths
rspec ./spec/jekyll_remote_theme_spec.rb:13 # Jekyll::RemoteTheme inits
...



More information about the Pkg-ruby-extras-maintainers mailing list