mirror of
https://github.com/openwrt/packages.git
synced 2025-12-27 04:39:58 +04:00
2.5.5: Bug fix for a deadlock in multi-thread/multi-process (using Process.fork) applications, like for example Puma 2.5.4: Fixes multiple vulnerabilities: CVE-2019-8320: Delete directory using symlink when decompressing tar CVE-2019-8321: Escape sequence injection vulnerability in verbose CVE-2019-8322: Escape sequence injection vulnerability in gem owner CVE-2019-8323: Escape sequence injection vulnerability in API response handling CVE-2019-8324: Installing a malicious gem may lead to arbitrary code execution CVE-2019-8325: Escape sequence injection vulnerability in errors Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>