--- ruby-extlib-0.9.15.orig/debian/rules +++ ruby-extlib-0.9.15/debian/rules @@ -0,0 +1,19 @@ +#! /usr/bin/make -f +#export DH_VERBOSE=1 +# +# Uncomment to ignore all test failures (but the tests will run anyway) +#export DH_RUBY_IGNORE_TESTS=all +# +# Uncomment to ignore some test failures (but the tests will run anyway). +# Valid values: +#export DH_RUBY_IGNORE_TESTS=ruby1.8 ruby1.9.1 require-rubygems +# +# If you need to specify the .gemspec (eg there is more than one) +#export DH_RUBY_GEMSPEC=gem.gemspec + +%: + dh $@ --buildsystem=ruby --with ruby + +override_dh_auto_install: + dh_auto_install + rm -f debian/ruby-extlib/usr/lib/ruby/vendor_ruby/extlib/rubygems.rb --- ruby-extlib-0.9.15.orig/debian/watch +++ ruby-extlib-0.9.15/debian/watch @@ -0,0 +1,2 @@ +version=3 +http://githubredir.debian.net/github/datamapper/extlib/([0-9.]*).tar.gz --- ruby-extlib-0.9.15.orig/debian/copyright +++ ruby-extlib-0.9.15/debian/copyright @@ -0,0 +1,113 @@ +This package was debianized by Bryan McLellan on +Mon, 26 Jan 2009 20:38:53 -0800. + +It was downloaded from + +Upstream Authors: + + Sam Smoot + David Heinemeier Hansson + Jan Molic + Thomas Sawyer + +Copyright: + + + + + +License: + + Permission is hereby granted, free of charge, to any person obtaining + a copy of this software and associated documentation files (the + "Software"), to deal in the Software without restriction, including + without limitation the rights to use, copy, modify, merge, publish, + distribute, sublicense, and/or sell copies of the Software, and to + permit persons to whom the Software is furnished to do so, subject to + the following conditions: + + The above copyright notice and this permission notice shall be + included in all copies or substantial portions of the Software. + + THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, + EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF + MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND + NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE + LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION + OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION + WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. + +License for lib/extlib/dictionary.rb: + + Ruby License + + This module is free software. You may use, modify, and/or redistribute this + software under the same terms as Ruby. + + This program is distributed in the hope that it will be useful, but WITHOUT + ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS + FOR A PARTICULAR PURPOSE. + +The full text of the Ruby licence is: + +Ruby is copyrighted free software by Yukihiro Matsumoto . +You can redistribute it and/or modify it under either the terms of the GPL +(see COPYING file), or the conditions below: + + 1. You may make and give away verbatim copies of the source form of the + software without restriction, provided that you duplicate all of the + original copyright notices and associated disclaimers. + + 2. You may modify your copy of the software in any way, provided that + you do at least ONE of the following: + + a) place your modifications in the Public Domain or otherwise + make them Freely Available, such as by posting said + modifications to Usenet or an equivalent medium, or by allowing + the author to include your modifications in the software. + + b) use the modified software only within your corporation or + organization. + + c) rename any non-standard executables so the names do not conflict + with standard executables, which must also be provided. + + d) make other distribution arrangements with the author. + + 3. You may distribute the software in object code or executable + form, provided that you do at least ONE of the following: + + a) distribute the executables and library files of the software, + together with instructions (in the manual page or equivalent) + on where to get the original distribution. + + b) accompany the distribution with the machine-readable source of + the software. + + c) give non-standard executables non-standard names, with + instructions on where to get the original software distribution. + + d) make other distribution arrangements with the author. + + 4. You may modify and include the part of the software into any other + software (possibly commercial). But some files in the distribution + are not written by the author, so that they are not under this terms. + They are gc.c(partly), utils.c(partly), regex.[ch], fnmatch.[ch], + glob.c, st.[ch] and some files under the ./missing directory. See + each file for the copying condition. + + 5. The scripts and library files supplied as input to or produced as + output from the software do not automatically fall under the + copyright of the software, but belong to whomever generated them, + and may be sold commercially, and may be aggregated with this + software. + + 6. THIS SOFTWARE IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS OR + IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED + WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR + PURPOSE. + +Debian packaging: + + The Debian packaging is © 2009, Bryan McLellan + and is licensed under the GPL, see /usr/share/common-licenses/GPL. --- ruby-extlib-0.9.15.orig/debian/control +++ ruby-extlib-0.9.15/debian/control @@ -0,0 +1,60 @@ +Source: ruby-extlib +Section: ruby +Priority: extra +Maintainer: Bryan McLellan +Uploaders: Debian Ruby Extras Maintainers +Vcs-Browser: http://svn.debian.org/viewsvn/pkg-ruby-extras/trunk/libextlib-ruby/ +Vcs-Svn: svn://svn.debian.org/svn/pkg-ruby-extras/trunk/libextlib-ruby/ +Build-Depends: debhelper (>= 8), ruby-setup, gem2deb (>= 0.2.13~), graphviz +Standards-Version: 3.9.2 +Homepage: http://rubyforge.org/projects/extlib/ +XS-Ruby-Versions: all + +Package: ruby-extlib +Architecture: all +XB-Ruby-Versions: ${ruby:Versions} +Depends: ${shlibs:Depends}, ${misc:Depends}, ruby | ruby-interpreter +Replaces: libextlib-ruby (<< 0.9.15-1~), libextlib-ruby1.8 (<< 0.9.15-1~), libextlib-ruby1.9.1 (<< 0.9.15-1~), libextlib-ruby-doc (<< 0.9.15-1~) +Breaks: libextlib-ruby (<< 0.9.15-1~), libextlib-ruby1.8 (<< 0.9.15-1~), libextlib-ruby1.9.1 (<< 0.9.15-1~), libextlib-ruby-doc (<< 0.9.15-1~) +Provides: libextlib-ruby, libextlib-ruby1.8, libextlib-ruby1.9.1, libextlib-ruby-doc +Description: general Ruby class extensions for DataMapper and Merb + This library provides a number of lightweight Ruby class extensions + extracted from DataMapper. Examples include a Mash class, which is a + Hash with indifferent access and an added blank? method to most + standard variable classes. + +Package: libextlib-ruby +Section: oldlibs +Priority: extra +Architecture: all +Depends: ${misc:Depends}, ruby-extlib +Description: Transitional package for ruby-extlib + This is a transitional package to ease upgrades to the ruby-extlib + package. It can safely be removed. + +Package: libextlib-ruby1.8 +Section: oldlibs +Priority: extra +Architecture: all +Depends: ${misc:Depends}, ruby-extlib +Description: Transitional package for ruby-extlib + This is a transitional package to ease upgrades to the ruby-extlib + package. It can safely be removed. + +Package: libextlib-ruby1.9.1 +Section: oldlibs +Priority: extra +Architecture: all +Depends: ${misc:Depends}, ruby-extlib +Description: Transitional package for ruby-extlib + This is a transitional package to ease upgrades to the ruby-extlib + package. It can safely be removed. + +Package: libextlib-ruby-doc +Section: oldlibs +Priority: extra +Architecture: all +Depends: ${misc:Depends}, ruby-extlib +Description: Transitional package for ruby-extlib + This is a transitional package to ease upgrades to the ruby-extlib + package. It can safely be removed. --- ruby-extlib-0.9.15.orig/debian/compat +++ ruby-extlib-0.9.15/debian/compat @@ -0,0 +1 @@ +8 --- ruby-extlib-0.9.15.orig/debian/changelog +++ ruby-extlib-0.9.15/debian/changelog @@ -0,0 +1,58 @@ +ruby-extlib (0.9.15-3) unstable; urgency=high + + * Team upload. + * Import patches 633974b2759d9b92 and 4540e7102b803624 from uptream + to remove symbol and YAML coercion from the XML parser. [CVE-2013-0156] + (Closes: #697895) + + -- Cédric Boutillier Fri, 11 Jan 2013 18:15:39 +0100 + +ruby-extlib (0.9.15-2) unstable; urgency=low + + * Add full text of the Ruby licence. + + -- Tollef Fog Heen Wed, 02 May 2012 17:22:04 +0200 + +ruby-extlib (0.9.15-1) unstable; urgency=low + + * Update to new Ruby policy + - rename source package. Closes: #670834 + * Bump debhelper compat version + * Disable rubygems.rb hacks, as they aren't needed for the versions of + rubygems we're likely to encounter. + + -- Tollef Fog Heen Tue, 10 Apr 2012 20:49:48 +0200 + +libextlib-ruby (0.9.13-2) unstable; urgency=low + + * std-ver -> 3.8.4. No changes needed. + * Switch to ruby 1.9.1. Closes: #569866. + + -- Lucas Nussbaum Sat, 20 Feb 2010 19:06:29 +0100 + +libextlib-ruby (0.9.13-1) unstable; urgency=low + + * New upstream release + - Removes rubygems require (Closes: Bug541404) + * Update watchfile to use githubredir + * Minor grammatical changes to short description + * Switch section to ruby from libs + * Bump standards revision to 3.8.3 + * Move ruby-pkg-tools to build-depends + * Bump debhelper version from 4 to 5 + * Move History.txt from docs to changelogs + + -- Bryan McLellan Thu, 10 Nov 2009 12:39:09 -0700 + +libextlib-ruby (0.9.10-2) unstable; urgency=low + + * Update package descriptions (Closes: Bug#520211) + + -- Bryan McLellan Wed, 18 Mar 2009 11:33:30 -0700 + +libextlib-ruby (0.9.10-1) unstable; urgency=low + + * Initial release (Closes: Bug#513295) + + -- Bryan McLellan Mon, 26 Jan 2009 20:38:53 -0800 + --- ruby-extlib-0.9.15.orig/lib/extlib/rubygems.rb +++ ruby-extlib-0.9.15/lib/extlib/rubygems.rb @@ -1,5 +1,5 @@ # this is a temporary workaround until rubygems Does the Right thing here -require 'rubygems' +#require 'rubygems' module Gem class SourceIndex --- ruby-extlib-0.9.15.orig/lib/extlib/hash.rb +++ ruby-extlib-0.9.15/lib/extlib/hash.rb @@ -279,9 +279,7 @@ self.typecasts["decimal"] = lambda{|v| BigDecimal(v)} self.typecasts["double"] = lambda{|v| v.nil? ? nil : v.to_f} self.typecasts["float"] = lambda{|v| v.nil? ? nil : v.to_f} - self.typecasts["symbol"] = lambda{|v| v.to_sym} self.typecasts["string"] = lambda{|v| v.to_s} - self.typecasts["yaml"] = lambda{|v| v.nil? ? nil : YAML.load(v)} self.typecasts["base64Binary"] = lambda{|v| v.unpack('m').first } self.available_typecasts = self.typecasts.keys --- ruby-extlib-0.9.15.orig/spec/hash_spec.rb +++ ruby-extlib-0.9.15/spec/hash_spec.rb @@ -254,7 +254,7 @@ 'approved' => nil, 'written_on' => nil, 'viewed_at' => nil, - 'content' => nil, + 'content' => { 'type' => 'yaml' }, 'parent_id' => nil } Hash.from_xml(topic_xml)["topic"].should == expected_topic_hash @@ -292,12 +292,12 @@ # Changed this line where the key is :message. The yaml specifies this as a symbol, and who am I to change what you specify # The line in ActiveSupport is # 'content' => { 'message' => "Have a nice day", 1 => "should be an integer", "array" => [{ "should-have-dashes" => true, "should_have_underscores" => true }] }, - 'content' => { :message => "Have a nice day", 1 => "should be an integer", "array" => [{ "should-have-dashes" => true, "should_have_underscores" => true }] }, + 'content' => "--- \n1: should be an integer\n:message: Have a nice day\narray: \n- should-have-dashes: true\n should_have_underscores: true\n", 'author_email_address' => "david@loudthinking.com", 'parent_id' => nil, 'ad_revenue' => BigDecimal("1.50"), 'optimum_viewing_angle' => 135.0, - 'resident' => :yes + 'resident' => 'yes' } Hash.from_xml(topic_xml)["topic"].each do |k,v|