Next | Query returned 11 messages, browsing 1 to 10 | Previous

History of commit frequency

CVS Commit History:


   2024-04-25 17:06:11 by Takahiro Kambe | Files touched by this commit (5) | Package updated
Log message:
lang/ruby32-base: update to 3.2.4

This is security release.  Note CVE-2024-27280 and CVE-2024-27281 were
already fixed by ruby31-base-3.2.3nb3.

3.2.4 (2024-04-23)

* CVE-2024-27282: Arbitrary memory address read vulnerability with Regex
  search
* CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc
* CVE-2024-27280: Buffer overread vulnerability in StringIO
   2024-03-23 15:47:13 by Takahiro Kambe | Files touched by this commit (5)
Log message:
lang/ruby32-base: fix CVE-2024-27281

Update rdoc to 6.5.1.1 to fix for CVE-2024-27281.

Bump PKGREVISION.
   2024-01-21 09:35:39 by Takahiro Kambe | Files touched by this commit (8) | Package updated
Log message:
lang/ruby32-base: update to 3.2.3

Since ruby32-base3.2.2-nb2 have uri gem 0.12.2, this update contains
no security fix.

These default gems are updated from ruby32-base-3.2.2nb4:

	- rubygems 3.4.9
	- bundler 2.4.19
	- net-http 0.4.1
	- syntax-suggest 1.1.0

These bundled gems are updated:

	- net-ftp 0.2.1
	- net-imap 0.3.4.1
	- net-smtp 0.3.4

3.2.3 (2024-01-18)

This release includes many bug-fixes.  See the GitHub releases for further
details.

This release also includes the update of uri.gem to 0.12.2 which contains
the security fix.  Please check the topics below for details.

	* CVE-2023-36617: ReDoS vulnerability in URI
   2024-01-16 16:17:41 by Takahiro Kambe | Files touched by this commit (3)
Log message:
lang/ruby32-base: enable ruby-yjit on supprted platforms.

* Accidently, ruby-yjit was not enabled on supprted platforms.
* RUBY_SUFFIX is always defined.
* Avoid use "!empty()".

Bump PKGREVISION.
   2023-10-25 00:11:51 by Thomas Klausner | Files touched by this commit (2298)
Log message:
*: bump for openssl 3
   2023-09-10 10:54:09 by Nia Alarie | Files touched by this commit (2)
Log message:
ruby3*-base: Require a compiler with c11 and thread local support.
   2023-06-29 17:42:07 by Takahiro Kambe | Files touched by this commit (6) | Package updated
Log message:
lang/ruby32-base: update bundled gem uri to 0.12.2

Fix CVE-2023-36617: ReDoS vulnerability in URI.

Bump PKGREVISION.
   2023-05-30 17:54:36 by Takahiro Kambe | Files touched by this commit (2) | Package updated
Log message:
lang/ruby32-base: update ALTERNATIVES

rdbg was missing from ALTERNATIVES.

Bump PKGREVISION.
   2023-04-04 14:20:30 by Havard Eidnes | Files touched by this commit (1)
Log message:
ruby32-base: default to yjit only on platforms supporting it.

That would be x86_64, aarch64 and (possibly) aarch64be.

OK'ed by taca@
   2023-04-01 11:26:58 by Takahiro Kambe | Files touched by this commit (3) | Package updated
Log message:
lang/ruby32: update to 3.2.2

Ruby 3.2.2 Released			Posted by naruse on 30 Mar 2023

Ruby 3.2.2 has been released.

This release includes security fixes.  Please check the topics below for
details.

* CVE-2023-28755: ReDoS vulnerability in URI
* CVE-2023-28756: ReDoS vulnerability in Time

What's Changed

* Backport [Bug #19158] for Ruby 3.2 by hsbt · Pull Request #7356
* Bug #19415: Incorrect circularity warning for concurrent requires
* Bug #19400: YJIT fails to boot on ARM64 systems with 64 KiB pages
* Bug #19419: [BUG] try to mark T_NONE object in ibf_dump_mark
* Bug #19444: YJIT String#+@ miscompilations
* Bug #19445: Segmentation fault with Numeric#step
* Bug #19439: Marshal.load doesn't load Regexp instance variables
* Bug #19459: Is length of IO::Buffer#read required or optional?
* Bug #19464: YJIT miscompiles BasicObject#__send__ to alias methods of send
* Bug #19468: Ruby 3.2: net/http sets UTF-8 encoding for binary responses
* Bug #19469: Crash when resizing generic iv list
* Bug #19161: Cannot compile 3.0.5 or 3.1.3 on Red Hat Enterprise Linux 7
* Bug #19467: Some linear_time regexp does not match in linear time
* Bug #19476: Regexp unexpected partial match
* Bug #19536: Frozen status loss when moving objects
* Bug #19485: Unexpected behavior in squiggly heredocs
* Bug #19471: Regexp::compile does not handle :timeout argument
* Use URI-0.12.1 for Ruby 3.2 by hsbt · Pull Request #7603
* Merge RubyGems-3.4.10 and Bundler-2.4.10 by hsbt · Pull Request #7479
* Merge Time-0.2.2 by hsbt · Pull Request #7623

Note: This list is automatically generated by tool/gen-github-release.rb.
Because of this, some commits may be missing.

Next | Query returned 11 messages, browsing 1 to 10 | Previous