-
Notifications
You must be signed in to change notification settings - Fork 311
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ruby3.2-i18n/1.14.5 package update #18657
Conversation
octo-sts
bot
commented
May 6, 2024
Signed-off-by: wolfi-bot <121097084+wolfi-bot@users.noreply.github.com>
Package ruby3.2-i18n: Click to expand/collapsePackage ruby3.2-i18n:
Added: /usr/lib/ruby/gems/3.2.0/gems/i18n-1.14.5/MIT-LICENSE bincapz found differences: Click to expand/collapseDeleted: ruby3.2-i18n/usr/lib/ruby/gems/3.2.0/gems/i18n-1.14.4/lib/i18n/interpolate/ruby.rb [✅ LOW]
Deleted: ruby3.2-i18n/usr/lib/ruby/gems/3.2.0/gems/i18n-1.14.4/lib/i18n/backend/pluralization.rb [✅ LOW]
Deleted: ruby3.2-i18n/usr/lib/ruby/gems/3.2.0/gems/i18n-1.14.4/lib/i18n/backend/base.rb [✅ LOW]
Deleted: ruby3.2-i18n/usr/lib/ruby/gems/3.2.0/gems/i18n-1.14.4/lib/i18n/locale/tag/rfc4646.rb [✅ LOW]
Deleted: ruby3.2-i18n/usr/lib/ruby/gems/3.2.0/gems/i18n-1.14.4/lib/i18n/backend/cache.rb [
|
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | builtin/openssl | this binary includes OpenSSL source code | OpenSSL/ |
-LOW | ref/site/url | contains embedded HTTPS URLs | https://ruby-doc.org/stdlib/libdoc/openssl/rdoc/OpenSSL/Digest.html https://www.ruby-doc.org/core/classes/Object.html |
Deleted: ruby3.2-i18n/usr/lib/ruby/gems/3.2.0/gems/i18n-1.14.4/lib/i18n/tests/interpolation.rb [⚠️ MEDIUM]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | techniques/code_eval | evaluate code dynamically using eval() | eval(" |
Deleted: ruby3.2-i18n/usr/lib/ruby/gems/3.2.0/gems/i18n-1.14.4/lib/i18n/backend/cascade.rb [✅ LOW]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-LOW | ref/site/url | contains embedded HTTP URLs | http://github.com/clemens/i18n-cascading-backend |
Added: ruby3.2-i18n/usr/lib/ruby/gems/3.2.0/gems/i18n-1.14.5/lib/i18n/backend/pluralization.rb [✅ LOW]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+LOW | ref/site/url | contains embedded HTTPS URLs | ruby-i18n/i18n#629 https://unicode-org.github.io/cldr/ldml/tr35-numbers.html |
Added: ruby3.2-i18n/usr/lib/ruby/gems/3.2.0/gems/i18n-1.14.5/lib/i18n/backend/cache.rb [⚠️ MEDIUM]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | builtin/openssl | this binary includes OpenSSL source code | OpenSSL/ |
+LOW | ref/site/url | contains embedded HTTPS URLs | https://ruby-doc.org/stdlib/libdoc/openssl/rdoc/OpenSSL/Digest.html https://www.ruby-doc.org/core/classes/Object.html |
Added: ruby3.2-i18n/usr/lib/ruby/gems/3.2.0/gems/i18n-1.14.5/lib/i18n/interpolate/ruby.rb [✅ LOW]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+LOW | ref/site/url | contains embedded HTTP URLs | http://github.com/mutoh/gettext/blob/f6566738b981fe0952548c421042ad1e0cd |
Added: ruby3.2-i18n/usr/lib/ruby/gems/3.2.0/gems/i18n-1.14.5/lib/i18n/backend/base.rb [✅ LOW]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+LOW | encoding/json/decode | decodes JSON messages | JSON.parse |
Added: ruby3.2-i18n/usr/lib/ruby/gems/3.2.0/gems/i18n-1.14.5/lib/i18n/backend/cascade.rb [✅ LOW]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+LOW | ref/site/url | contains embedded HTTP URLs | http://github.com/clemens/i18n-cascading-backend |
Added: ruby3.2-i18n/usr/lib/ruby/gems/3.2.0/gems/i18n-1.14.5/lib/i18n/tests/interpolation.rb [⚠️ MEDIUM]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | techniques/code_eval | evaluate code dynamically using eval() | eval(" |
Added: ruby3.2-i18n/usr/lib/ruby/gems/3.2.0/gems/i18n-1.14.5/lib/i18n/locale/tag/rfc4646.rb [✅ LOW]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+LOW | ref/site/url | contains embedded HTTP URLs | http://en.wikipedia.org/wiki/IETF_language_tag |