rubygems/rubygems-1.8.23.1-CVE-2013-4287-algorithmic-complexity-vulnerability.patch
2013-10-17 22:34:56 +04:00

25 lines
739 B
Diff

From 7bcb461a362431c9706a0175c0be0d91e927f067 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?V=C3=ADt=20Ondruch?= <vondruch@redhat.com>
Date: Mon, 2 Sep 2013 10:13:47 +0200
Subject: [PATCH] Fix algorithmic complexity vulnerability.
---
lib/rubygems/version.rb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/lib/rubygems/version.rb b/lib/rubygems/version.rb
index 50d8204..7660a20 100644
--- a/lib/rubygems/version.rb
+++ b/lib/rubygems/version.rb
@@ -140,7 +140,7 @@
class Gem::Version
include Comparable
- VERSION_PATTERN = '[0-9]+(\.[0-9a-zA-Z]+)*' # :nodoc:
+ VERSION_PATTERN = '[0-9]+(?>\.[0-9a-zA-Z]+)*' # :nodoc:
ANCHORED_VERSION_PATTERN = /\A\s*(#{VERSION_PATTERN})*\s*\z/ # :nodoc:
##
--
1.8.3.1