Debian Patches

Status for ruby-image-processing/1.10.3-1+deb11u1

Patch Description Author Forwarded Bugs Origin Last update
remove-bundler.patch Remove bundler for fixing the test failure Jongmin Kim <jmkim@pukyong.ac.kr> not-needed 2019-06-06
exclude-phashion.patch Exclude phashion from test suite Phashion is needed while comparing two images during testing. However,
it was not packaged in Debian yet. This patch will exclude the phashion
from test suite.
.
Additionally, Phashion has some compatibility issue with Ruby packaged
in Debian.
Jongmin Kim <jmkim@pukyong.ac.kr> not-needed upstream 2019-06-06
Prevent-remote-shell-execution-in-apply.patch Prevent remote shell execution in `#apply`
If the operations are coming from user input, this could allow the user
to execute arbitrary shell commands via `Kernel#system` and
`Kernel#spawn`:

ImageProcessing::Vips.apply({ system: "echo something" })

We prevent this by using `#public_send` instead of `#send`, which goes
to method missing instead of calling private methods, which include
`Kernel#system` and `Kernel#spawn`.
=?UTF-8?q?Janko=20Marohni=C4=87?= <janko.marohnic@gmail.com> no debian https://github.com/janko/image_processing/commit/038e4574e8f4f4b636a62394e09983c71980dada 2022-03-01

All known versions for source package 'ruby-image-processing'

Links