Bug #17201: Backport webrick patch for CVE-2020-25613

• Status: Closed
• Assignee: -
• Target version: -
• Backport: 2.5: DONE, 2.6: DONE, 2.7: DONE

[hsbt (Hiroshi SHIBATA)]

I created the patch sets for Ruby 2.5, 2.6 and 2.7 for CVE-2020-25613

[nagachika (Tomoyuki Chikanaga)]

• Backport changed from 2.5: REQUIRED, 2.6: REQUIRED, 2.7: REQUIRED to 2.5: REQUIRED, 2.6: REQUIRED, 2.7: DONE

I'm afraid that I did backport the changeset d23d2f3f6fbb5d787b0dd80675c489a692be23e2 solely at 828c34e58b63d64558ec0f2d1d7ae401c5e6b21f.
I applied the remaining part of the patch into ruby_2_7 at 48ac73769772317d6c3f864f087ef930a47120d9.

[usa (Usaku NAKAMURA)]

• Backport changed from 2.5: REQUIRED, 2.6: REQUIRED, 2.7: DONE to 2.5: REQUIRED, 2.6: DONE, 2.7: DONE

backported at r67892 for ruby_2_6

[usa (Usaku NAKAMURA)]

• Backport changed from 2.5: REQUIRED, 2.6: DONE, 2.7: DONE to 2.5: DONE, 2.6: DONE, 2.7: DONE

backported at r67893 for ruby_2_5