Bug #13842: Backport request: Rubygems-2.6.13

• Status: Closed
• Assignee: hsbt (Hiroshi SHIBATA)
• Target version: -
• Backport: 2.2: DONE, 2.3: DONE, 2.4: DONE

[hsbt (Hiroshi SHIBATA)]

Rubygems-2.6.13 has been released now.
Its version was required to backport all stable versions of Ruby.

I created patches about rubygems 2.6.13.

For Ruby 2.2 and 2.3: These patches contain only security fixes of rubygems-2.6.13
For Ruby 2.4: This patches are rubygems-2.6.12 and 2.6.13.

[usa (Usaku NAKAMURA)]

• Backport changed from 2.2: REQUIRED, 2.3: REQUIRED, 2.4: REQUIRED to 2.2: REQUIRED, 2.3: DONE, 2.4: REQUIRED

[hsbt (Hiroshi SHIBATA)]

• File rubygems-2613-ruby22-testcase.patch rubygems-2613-ruby22-testcase.patch added

I found to fail testcase on Ruby 2.2 used attached patch named "rubygems-2613-ruby22.patch".

I created additional patch for broken test.

It replaced util_spec to malicious Gem::Specification instance and invoke Gem::Specification.reset and use Gem::Installer.new instead of Gem::Installer.at

[usa (Usaku NAKAMURA)]

• Backport changed from 2.2: REQUIRED, 2.3: DONE, 2.4: REQUIRED to 2.2: DONE, 2.3: DONE, 2.4: REQUIRED

[nagachika (Tomoyuki Chikanaga)]

• Backport changed from 2.2: DONE, 2.3: DONE, 2.4: REQUIRED to 2.2: DONE, 2.3: DONE, 2.4: DONE