File rubygem-rack.spec of Package rubygem-rack

Overview Repositories Revisions Requests Users Attributes Meta

File rubygem-rack.spec of Package rubygem-rack

#
# spec file for package rubygem-rack
#
# Copyright (c) 2020 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.

# Please submit bugfixes or comments via http://bugs.opensuse.org/
#

#
# This file was generated with a gem2rpm.yml and not just plain gem2rpm.
# All sections marked as MANUAL, license headers, summaries and descriptions
# can be maintained in that file. Please consult this file before editing any
# of those fields
#

Name:           rubygem-rack
Version:        1.6.13
Release:        0
%define mod_name rack
%define mod_full_name %{mod_name}-%{version}
# MANUAL
BuildRequires:  fdupes
# /MANUAL
BuildRoot:      %{_tmppath}/%{name}-%{version}-build
BuildRequires:  ruby-macros >= 5
BuildRequires:  %{ruby}
BuildRequires:  %{rubygem gem2rpm}
BuildRequires:  update-alternatives
Url:            http://rack.github.io/
Source:         https://rubygems.org/gems/%{mod_full_name}.gem
Source1:        rubygem-rack-rpmlintrc
Source2:        gem2rpm.yml
# MANUAL
Patch0:  CVE-2020-8161.patch
Patch1:  CVE-2020-8184.patch
# CVE-2022-30123 [bsc#1200750], crafted requests can cause shell escape sequences
Patch2:  rubygem-rack-CVE-2022-30123.patch
# CVE-2022-30122 [bsc#1200748], crafted multipart POST request may cause a DoS
Patch3:  rubygem-rack-CVE-2022-30122.patch
# CVE-2022-44571 [bsc#1207599], denial of service in Content-Disposition parsing
Patch4:  rubygem-rack-CVE-2022-44571.patch
# CVE-2022-44570 [bsc#1207597], denial of service in Content-Disposition parsing
Patch5:  rubygem-rack-CVE-2022-44570.patch
# CVE-2023-27539 [bsc#1209503], denial of service in header parsing
Patch6:  rubygem-rack-CVE-2023-27539.patch
# CVE-2024-26146 [bsc#1220248], Denial of Service vulnerability in Rack headers parsing routine
Patch7:  rubygem-rack-CVE-2024-26146.patch
# CVE-2024-26141 [bsc#1220242], Denial of Service Vulnerability in Range request header parsing
Patch8:  rubygem-rack-CVE-2024-26141.patch
# CVE-2024-25126 [bsc#1220239], Denial of Service Vulnerability in Rack Content-Type Parsing
Patch9:  rubygem-rack-CVE-2024-25126.patch
# /MANUAL
Summary:        A modular Ruby webserver interface
License:        MIT
Group:          Development/Languages/Ruby
PreReq:         update-alternatives

%description
Rack provides a minimal, modular and adaptable interface for developing
web applications in Ruby.  By wrapping HTTP requests and responses in
the simplest way possible, it unifies and distills the API for web
servers, web frameworks, and software in between (the so-called
middleware) into a single method call.
Also see http://rack.github.io/.

%prep
%gem_unpack
%patch0 -p 1
%patch1 -p 1
%patch2 -p1
%patch3 -p1
%patch4 -p1
%patch5 -p1
%patch6 -p1
%patch7 -p1
%patch8 -p1
%patch9 -p1
find -type f -print0 | xargs -0 touch -r %{S:0}
%gem_build

%build

%install
%gem_install \
  --symlink-binaries \
  --doc-files="COPYING HISTORY.md README.rdoc" \
  -f
# MANUAL
%fdupes %{buildroot}%{_libdir}/ruby/gems/*/gems/%{mod_name}-%{version}/
# /MANUAL

%gem_packages

%changelog

Places

File rubygem-rack.spec of Package rubygem-rack

Places