2024-04-25 17:06:11 by Takahiro Kambe | Files touched by this commit (5) | |
Log message:
lang/ruby32-base: update to 3.2.4
This is security release. Note CVE-2024-27280 and CVE-2024-27281 were
already fixed by ruby31-base-3.2.3nb3.
3.2.4 (2024-04-23)
* CVE-2024-27282: Arbitrary memory address read vulnerability with Regex
search
* CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc
* CVE-2024-27280: Buffer overread vulnerability in StringIO
|
2024-03-23 15:47:13 by Takahiro Kambe | Files touched by this commit (5) |
Log message:
lang/ruby32-base: fix CVE-2024-27281
Update rdoc to 6.5.1.1 to fix for CVE-2024-27281.
Bump PKGREVISION.
|
2024-01-21 09:35:39 by Takahiro Kambe | Files touched by this commit (8) | |
Log message:
lang/ruby32-base: update to 3.2.3
Since ruby32-base3.2.2-nb2 have uri gem 0.12.2, this update contains
no security fix.
These default gems are updated from ruby32-base-3.2.2nb4:
- rubygems 3.4.9
- bundler 2.4.19
- net-http 0.4.1
- syntax-suggest 1.1.0
These bundled gems are updated:
- net-ftp 0.2.1
- net-imap 0.3.4.1
- net-smtp 0.3.4
3.2.3 (2024-01-18)
This release includes many bug-fixes. See the GitHub releases for further
details.
This release also includes the update of uri.gem to 0.12.2 which contains
the security fix. Please check the topics below for details.
* CVE-2023-36617: ReDoS vulnerability in URI
|
2024-01-16 16:17:41 by Takahiro Kambe | Files touched by this commit (3) |
Log message:
lang/ruby32-base: enable ruby-yjit on supprted platforms.
* Accidently, ruby-yjit was not enabled on supprted platforms.
* RUBY_SUFFIX is always defined.
* Avoid use "!empty()".
Bump PKGREVISION.
|
2023-10-25 00:11:51 by Thomas Klausner | Files touched by this commit (2298) |
Log message:
*: bump for openssl 3
|
2023-09-10 10:54:09 by Nia Alarie | Files touched by this commit (2) |
Log message:
ruby3*-base: Require a compiler with c11 and thread local support.
|
2023-06-29 17:42:07 by Takahiro Kambe | Files touched by this commit (6) | |
Log message:
lang/ruby32-base: update bundled gem uri to 0.12.2
Fix CVE-2023-36617: ReDoS vulnerability in URI.
Bump PKGREVISION.
|
2023-05-30 17:54:36 by Takahiro Kambe | Files touched by this commit (2) | |
Log message:
lang/ruby32-base: update ALTERNATIVES
rdbg was missing from ALTERNATIVES.
Bump PKGREVISION.
|
2023-04-04 14:20:30 by Havard Eidnes | Files touched by this commit (1) |
Log message:
ruby32-base: default to yjit only on platforms supporting it.
That would be x86_64, aarch64 and (possibly) aarch64be.
OK'ed by taca@
|
2023-04-01 11:26:58 by Takahiro Kambe | Files touched by this commit (3) | |
Log message:
lang/ruby32: update to 3.2.2
Ruby 3.2.2 Released Posted by naruse on 30 Mar 2023
Ruby 3.2.2 has been released.
This release includes security fixes. Please check the topics below for
details.
* CVE-2023-28755: ReDoS vulnerability in URI
* CVE-2023-28756: ReDoS vulnerability in Time
What's Changed
* Backport [Bug #19158] for Ruby 3.2 by hsbt · Pull Request #7356
* Bug #19415: Incorrect circularity warning for concurrent requires
* Bug #19400: YJIT fails to boot on ARM64 systems with 64 KiB pages
* Bug #19419: [BUG] try to mark T_NONE object in ibf_dump_mark
* Bug #19444: YJIT String#+@ miscompilations
* Bug #19445: Segmentation fault with Numeric#step
* Bug #19439: Marshal.load doesn't load Regexp instance variables
* Bug #19459: Is length of IO::Buffer#read required or optional?
* Bug #19464: YJIT miscompiles BasicObject#__send__ to alias methods of send
* Bug #19468: Ruby 3.2: net/http sets UTF-8 encoding for binary responses
* Bug #19469: Crash when resizing generic iv list
* Bug #19161: Cannot compile 3.0.5 or 3.1.3 on Red Hat Enterprise Linux 7
* Bug #19467: Some linear_time regexp does not match in linear time
* Bug #19476: Regexp unexpected partial match
* Bug #19536: Frozen status loss when moving objects
* Bug #19485: Unexpected behavior in squiggly heredocs
* Bug #19471: Regexp::compile does not handle :timeout argument
* Use URI-0.12.1 for Ruby 3.2 by hsbt · Pull Request #7603
* Merge RubyGems-3.4.10 and Bundler-2.4.10 by hsbt · Pull Request #7479
* Merge Time-0.2.2 by hsbt · Pull Request #7623
Note: This list is automatically generated by tool/gen-github-release.rb.
Because of this, some commits may be missing.
|