Relax dependency on ruby-rexml to allow version embedded in libruby2.7

This commit is contained in:
Pirate Praveen 2021-04-20 23:17:37 +05:30
parent e702d624af
commit 5f6094489d
3 changed files with 15 additions and 1 deletions

2
debian/control vendored
View file

@ -102,7 +102,7 @@ Depends: ${shlibs:Depends}, ${misc:Depends},
ruby-bcrypt (>= 3.1.14~),
ruby-doorkeeper (>= 5.5~),
ruby-doorkeeper-openid-connect (>= 1.7.5~),
ruby-rexml (>= 3.2.5~),
ruby-rexml (>= 3.2.3.1~),
ruby-saml (>= 1.12.1~),
ruby-omniauth (>= 1.8~),
ruby-omniauth-auth0 (>= 2.0~),

View file

@ -0,0 +1,13 @@
libruby2.7 has rexml 3.2.3.1 which has latest security fixes
--- a/Gemfile
+++ b/Gemfile
@@ -28,7 +28,7 @@
gem 'bcrypt', '~> 3.1', '>= 3.1.14'
gem 'doorkeeper', '~> 5.5'
gem 'doorkeeper-openid_connect', '~> 1.7', '>= 1.7.5'
-gem 'rexml', '~> 3.2', '>= 3.2.5'
+gem 'rexml', '~> 3.2', '>= 3.2.3.1'
gem 'ruby-saml', '~> 1.12', '>= 1.12.1'
gem 'omniauth', '~> 1.8'
gem 'omniauth-auth0', '~> 2.0'

View file

@ -18,6 +18,7 @@
0499-70-relax-graphlient.patch
0499-90-relax-webrick.patch
0499-91-relax-omniauth-azure-activedirectory-v2.patch
0499-92-relax-rexml.patch
0500-set-webpack-root.patch
0510-remove-dev-dependencies.patch
0520-add-system-lib-path-for-webpack.patch