Next | Query returned 19 messages, browsing 1 to 10 | Previous

History of commit frequency

CVS Commit History:


   2024-03-23 15:28:48 by Takahiro Kambe | Files touched by this commit (7)
Log message:
lang/ruby31-base: fix CVE-2024-27280 and CVE-2024-27281

Update rdoc to 6.4.1.1 to fix for CVE-2024-27281.
Update stringio to 3.0.1.2 to fix for CVE-2024-27280.

Bump PKGREVISION.
   2024-01-16 16:14:53 by Takahiro Kambe | Files touched by this commit (3)
Log message:
lang/ruby31-base: a few clean up

* RUBY_SUFFIX is always defined.
* Avoid use "!empty()".

NFC.
   2023-10-25 00:11:51 by Thomas Klausner | Files touched by this commit (2298)
Log message:
*: bump for openssl 3
   2023-09-10 10:54:09 by Nia Alarie | Files touched by this commit (2)
Log message:
ruby3*-base: Require a compiler with c11 and thread local support.
   2023-06-29 17:39:12 by Takahiro Kambe | Files touched by this commit (6) | Package updated
Log message:
lang/ruby31-base: update bundled gem uri to 0.12.2

Fix CVE-2023-36617: ReDoS vulnerability in URI.

Bump PKGREVISION.
   2023-04-01 11:17:15 by Takahiro Kambe | Files touched by this commit (2) | Package updated
Log message:
lang/ruby31: update to 3.1.4

Ruby 3.1.4 Released			Posted by nagachika on 30 Mar 2023

Ruby 3.1.4 has been released.

This release includes security fixes.  Please check the topics below for
details.

* CVE-2023-28755: ReDoS vulnerability in URI
* CVE-2023-28756: ReDoS vulnerability in Time

What's Changed

* Bug #19187: Ruby 3.1.3 testsuite fails after timezone 2022g update is
  applied
* Bug #19153: Since 2.7.7 CGI::Cookie raises ArgumentError when cookie
  domains is prefixed with a dot
* Bug #18629: block args array splatting assigns to higher scope _ var
* Bug #18765: Wrong description introduced by
  https://github.com/ruby/ruby/pull/4938/files
* Bug #19189: Ruby 3.1.3/3.2.x can no longer find pkg-config if not present
  at buildtime
* Bug #19292: Time object's wday, yday, and isdst returns broken value (and
  so does to_a) when kwarg in: 'UTC' was given
* Bug #19305: TracePoint#parameters segfaults when certain method creation
  pattern is used
* Bug #19319: Crash in rb_str_casemap
* Bug #19316: YJIT crash in 3.2.0
* Bug #19284: Integer overflow when using RUBY_GC_HEAP_INIT_SLOTS
  environment variable
* Bug #19320: Crash during compaction while traversing the stack
* Bug #19389: StringIO gets(..., chomp: true) behaves differently to File/IO.
* Bug #19284: Integer overflow when using RUBY_GC_HEAP_INIT_SLOTS
  environment variable
* Bug #19398: Memory leak in WeakMap
* Bug #19403: Unable to Build Native Gems on Mac with Ruby 3.1.0+
* Bug #19415: Incorrect circularity warning for concurrent requires
* Bug #19419: [BUG] try to mark T_NONE object in ibf_dump_mark
* Bug #19445: Segmentation fault with Numeric#step
* Bug #19161: Cannot compile 3.0.5 or 3.1.3 on Red Hat Enterprise Linux 7
* Bug #18989: Backport f229b36087f1b387d77af8f3fa50f9bffd2fd44e to ruby_3_1
* Bug #18748: Range#cover? returns true for beginless range of different
  type
* Bug #18827: __ENCODING__ is not set to the source encoding when saving
  script lines
* Bug #19242: Circular cause by Marshal
* Bug #19243: Windows: Dir.home returns string in wrong encoding
* Bug #19115: RubyGems fails to detect OpenSSL in --with-static-linked-ext
  builds
* Bug #18464: RUBY_INTERNAL_EVENT_NEWOBJ tracepoint causes an interpreter
  crash when combined with Ractors
* Bug #19529: [BUG] ObjectSpace::WeakMap can segfault after compaction
* Bug #19485: Unexpected behavior in squiggly heredocs

Note: This list is automatically generated by tool/gen-github-release.rb.
Because of this, some commits may be missing.
   2023-01-16 07:33:51 by David A. Holland | Files touched by this commit (1)
Log message:
lang/ruby31-base: quote ${CC}; PR 57167
   2022-12-05 12:47:03 by Jonathan Perkin | Files touched by this commit (2)
Log message:
ruby31-base: Fix Darwin library naming.
   2022-11-26 14:02:49 by Takahiro Kambe | Files touched by this commit (11) | Package updated
Log message:
lang/ruby31-base: update to 3.1.3

Ruby 3.1.3 Released (2022-11-24)

Ruby 3.1.3 has been released.

This release includes a security fix.  Please check the topics below for
details.

* CVE-2021-33621: HTTP response splitting in CGI

This release also includes a fix for build failure with Xcode 14 and macOS
13 (Ventura).  See the related ticket for more details.
   2022-07-18 14:48:38 by Jonathan Perkin | Files touched by this commit (2)
Log message:
ruby31-base: Remove man entries from ALTERNATIVES.

pkg_alternatives does not support manual pages (it creates its own wrappers
based on the binary names), and including them breaks upgrade rebuilds.

Bump PKGREVISION.

Next | Query returned 19 messages, browsing 1 to 10 | Previous