Lucene search

K
oraclelinuxOracleLinuxELSA-2023-7025
HistoryNov 18, 2023 - 12:00 a.m.

ruby:2.5 security update

2023-11-1800:00:00
linux.oracle.com
26
ruby
security
update
2.5.9
111
http response
buffer overrun
redos
uri
time
rubygem-abrt

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.0%

rubygem-abrt
[0.3.0-4]

  • Execute test suite unconditionally.
  • Upload correct sources.
    [0.3.0-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
    [0.3.0-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
    [0.3.0-1]
  • Update to abrt 0.3.0.
    [0.2.0-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
    [0.2.0-1]
  • Update to abrt 0.2.0.
    [0.1.1-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
    [0.1.1-1]
  • Update to abrt 0.1.1.
    [0.0.6-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
    [0.0.6-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
    [0.0.6-1]
  • Update to abrt 0.0.6.
    [0.0.5-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
    [0.0.5-2]
  • Disable tests for EL builds.
    [0.0.5-1]
  • Update to abrt 0.0.5.
    [0.0.3-3]
  • Rebuild for https://fedoraproject.org/wiki/Features/Ruby_2.0.0
    [0.0.3-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
    [0.0.3-1]
  • Update to abrt 0.0.3.
    [0.0.2-1]
  • Initial package
    rubygem-bson
    rubygem-bundler
    rubygem-mongo
    [2.5.1-2]
  • Disable tests to fix FTBFS by dropped MongoDB module.
    Resolves: rhbz#1710863
    [2.5.1-1]
  • Update to mongo 2.5.1.
    [2.5.0-1]
  • Update to mongo 2.5.0.
    [2.4.3-2]
  • Escape macros in %changelog
    [2.4.3-1]
  • Update to mongo 2.4.3.
    [2.4.1-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
    [2.4.1-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
    [2.4.1-1]
  • Update to mongo 2.4.1.
    [2.4.0-1]
  • Update to mongo 2.4.0.
    [2.3.0-1]
  • Update to mongo 2.3.0.
    [1.10.2-5]
  • Disable tests until mongodb becomes stable in rawhide again.
    [1.10.2-4]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
    [1.10.2-2]
  • Fix tests
    [1.10.2-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
    [1.10.2-1]
  • Update to mongo 1.10.2.
    [1.9.2-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
    [1.9.2-1]
  • Update to mongo 1.9.2.
  • Enabled test suite.
    [1.6.4-5]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
    [1.6.4-4]
  • Fix to make it build/install on F19+
    [1.6.4-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
    [1.6.4-2]
  • Fixed doc
  • removed more BuildRequires that are not required
    [1.6.4-1]
  • Updated to latest version
  • Removed BuildRequires that are not needed
    [1.4.0-7]
  • Fixed checks.
    Only run checks that do not require a running mongodb server
    [1.4.0-6]
  • Changed .gemspec and Rakefile to not be doc
  • Added checks
    [1.4.0-5]
  • Fixed rubygem(bson) requires
    [1.4.0-4]
  • Updated to meet new fedora rubygem guidelines
    [1.4.0-3]
  • Changed group to Development/Languages
  • Changed the global variables
  • Seperated the doc and test into the doc rpm
    [1.4.0-2]
  • Added %{?dist} to version
    [1.4.0-1]
  • Initial package
    rubygem-mysql2
    rubygem-pg
    [1.0.0-3]
  • Fix FTBFS with PostgreSQL 10.6 and above.
    ruby
    [2.5.9-111]
  • Fix HTTP response splitting in CGI.
    Resolves: CVE-2021-33621
  • Fix Buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739
  • Fix ReDoS vulnerability in URI.
    Resolves: CVE-2023-28755
  • Fix ReDoS vulnerability in Time.
    Resolves: CVE-2023-28756
    [2.5.9-111]
  • Fix rdoc parsing of nil text tokens.
    Resolves: rhbz#2210326
    [2.5.9-110]
  • Fix FTBFS due to an incompatible load directive.
  • Fix a fiddle import test on an optimized glibc on Power 9.
  • Fix by adding length limit option for methods that parses date strings.
    Resolves: CVE-2021-41817
  • CGI::Cookie.parse no longer decodes cookie names to prevent spoofing security
    prefixes in cookie names.
    Resolves: CVE-2021-41819
    [2.5.9-109]
  • Properly fix command injection vulnerability in Rdoc.
    Related: CVE-2021-31799
    [2.5.9-108]
  • Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  • Fix StartTLS stripping vulnerability in Net::IMAP
    Resolves: CVE-2021-32066
  • Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810
    [2.5.9-107]
  • Update to Ruby 2.5.9.
    • Remove Patch20: ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch; subsumed
      Resolves: rhbz#1757844
  • Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1950308
    [2.5.5-106]
  • Remove file with non-commercial license from did_you_mean gem.
    Resolves: rhbz#1846113
    [2.5.5-105]
  • Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.
    Resolves: rhbz#1727832
  • Properly support %prerelease in %gemspec_ macros.
    Related: rhbz#1688758
  • Fix rdoc gzipped javascript pages are not the same across multilib.
    Resolves: rhbz#1719647
    [2.5.5-104]
  • Update to Ruby 2.5.5.
    • Remove Patch25: ruby-2.6.0-Update-for-tzdata-2018f.patch; subsumed
    • Remove Patch11: ruby-2.6.0-Try-to-update-cert.patch; subsumed
    • Remove Patch19: ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with
      -TLS-1.3.patch; subsumed
      Resolves: rhbz#1688758
  • Don’t ship .stp files when SystemTap support is disabled.
    Related: rhbz#1657915
  • Fix CovScan issues.
    Resolves: rhbz#1628592
    [2.5.3-103]
  • Refresh expired certificates to fix FTBFS.
    [2.5.3-102]
  • Fix Tokyo TZ tests.
    [2.5.3-101]
  • Update to Ruby 2.5.3.
    Resolves: rhbz#1643092
    [2.5.1-100]
  • Properly harden package using -fstack-protector-strong.
    • ruby-2.6.0-configure-fstack-protector-strong.patch
      Resolves: rhbz#1624168
      [2.5.1-99]
  • Additional OpenSSL 1.1.1 fixes.
    • ruby-2.6.0-fix-test-failure-with-TLS-1.3-maint.patch
    • ruby-2.6.0-config-support-include-directive.patch
    • ruby-2.6.0-use-larger-keys-for-SSL-tests.patch
      Related: rhbz#1616213
      [2.5.1-99]
  • Fix generated rdoc template issues.
    • ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch
      Resolves: rhbz#1612026
      [2.5.1-97]
  • Fix TLS 1.3 issues.
    • ruby-2.6.0-fix-test-failure-with-TLS-1.3.patch
    • ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with-TLS-1.3.patch
      Related: rhbz#1616213
      [2.5.1-96]
  • turn off tests
  • Related: bug#1614611
    [2.5.1-96]
  • Rebuild with fixed binutils
    [2.5.1-95]
  • Rebuild for new binutils
    [2.5.1-94]
  • Disable some test failing with OpenSSL 1.1.1.
    [2.5.1-94]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
    [2.5.1-93]
  • Add macros to edit files lists in .gemspec
    (gemspec_add_file and gemspec_remove_file).
    [2.5.1-93]
  • Make %gemspec_{add,remove}_dep modify .gemspec provided by %setup macro.
    [2.5.1-92]
  • Conflict requirement needs to generate dependency.
  • Stop using --with-setjmp-type=setjmp on aarch64 (rhbz#1545239).
    [2.5.1-92]
  • Update to Ruby 2.5.1.
    [2.5.0-91]
  • Don’t force libraries used to build Ruby to its dependencies.
  • Re-enable GMP dependency.
    [2.5.0-90]
  • Drop GMP dependency.
    [2.5.0-89]
  • Rebuild with new LDFLAGS from redhat-rpm-config
  • Use --with-setjmp-type=setjmp on aarch64 to work around gcc issue (#1545239)
    [2.5.0-89]
  • Fix: Multiple vulnerabilities in RubyGems
    https://bugzilla.redhat.com/show_bug.cgi?id=1547431
    https://www.ruby-lang.org/en/news/2018/02/17/multiple-vulnerabilities-in-rubygems/
    [2.5.0-89]
  • Drop obsolete ldconfig scriptlets.
  • Add GMP dependency.
  • Use ‘with’ operator in RPM dependency generator.
  • Add conflicts RPM generator.
  • Fix thread_safe test suite segfaults.
  • Fix invalid licenses.
    [2.5.0-89]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
    [2.5.0-88]
  • Rebuilt for switch to libxcrypt
    [2.5.0-87]
  • Fix segfaults during generating of documentation.
    [2.5.0-86]
  • Upgrade to Ruby 2.5.0.
    [2.4.2-86]
  • Add macro to remove rubypick dependency.
  • Improve ‘with’ conditional statement as inline.
    [2.4.2-85]
  • Add macros to remove systemtap, git and cmake dependencies.
    [2.4.2-84]
  • Update to Ruby 2.4.2.
    [2.4.1-84]
  • Drop ruby-devel dependency on rubypick, which is pulled in transtitively.
    [2.4.1-83]
  • Fix ‘IOError: stream closed’ errors affecting Puma.
  • Temporary disable checksec on PPC64LE (rhbz#1479302).
    [2.4.1-82]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
    [2.4.1-81]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
    [2.4.1-80]
  • OpenSSL 1.1.0f-3 disables some weak ciphers. Adjust the package to pass
    the tests suite.
    [2.4.1-79]
  • Update to Ruby 2.4.1.
    [2.4.0-78]
  • Fix OpenSSL symlinks.
    [2.4.0-77]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
    [2.4.0-76]
  • Fix GCC 7.x compatibility (rhbz#1417590).
  • Use standardized multilib solution (rhbz#1412274).
    [2.4.0-75]
  • Apply patch fixing rubygem-mongo build failures.
    [2.4.0-74]
  • Rebuild again for f26-ruby24 sidetag
    [2.4.0-73]
  • Rebuild for readline 7.x
    [2.4.0-72]
  • Link files into directory to avoid dir => symlink isues.
    [2.4.0-71]
  • Add rubygem-io-console dependency for rubygem-rdoc.
    [2.4.0-70]
  • Upgrade to Ruby 2.4.0.
  • Move gemified xmlrpc into subpackage.
  • Move gemified openssl into subpackage.
  • Tk is removed from stdlib.
  • Extend ‘gem_’ macros for pre-release version support.
    [2.3.3-61]
  • Update to Ruby 2.3.3.
  • Exclude json.rb from ruby-libs (rhbz#1397370).
    [2.3.2-60]
  • Update to Ruby 2.3.2.
    [2.3.1-59]
  • Continue to use OpenSSL 1.0 for the moment.
  • Add gemspec_add_dep and gemspec_remove_dep macros.
  • Harden package.
    [2.3.1-58]
  • Workaround ‘an invalid stdio handle’ error on PPC (rhbz#1361037).
    [2.3.1-57]
  • Make symlinks for json gem.
    [2.3.1-56]
  • Requires rubygem(json) for rubygem-rdoc (rhbz#1325022).
    [2.3.1-55]
  • Update to Ruby 2.3.1.
    [2.3.0-54]
  • Add rubypick and rubygems requires to ruby-devel to deal with BuildRequires
    [2.3.0-53]
  • Backport trunk@53455 to make ruby-qt build
    [2.3.0-52]
  • Explicitly require RDoc, since weak dependencies are ignored by default.
    [2.3.0-51]
  • Load RubyGems prior ABRT hook to properly rescue RubyGems exceptions.
    [2.3.0-50]
  • Upgrade to Ruby 2.3.0.
  • Move gemified net-telnet into subpackage.
  • Add did_you_mean subpackage.
  • Add virtual provides for CCAN copylibs.
  • Use weak dependencies.
    [2.3.0-0.7.preview2]
  • Add systemtap tests.
    [2.2.4-47]
  • Update to Ruby 2.2.4.
    [2.2.3-46]
  • Fix ABRT hook autoloading.
    [2.2.3-45]
  • Add support for MIPS architecture to config.h
    [2.2.3-44]
  • Update to Ruby 2.2.3.
    [2.2.2-43]
  • Fix for ‘dh key too small’ error of OpenSSL 1.0.2+.
    [2.2.2-42]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
    [2.2.2-41]
  • Fix the git BR following the git package split.
    [2.2.2-40]
  • Fix upgrade path (rubygem-io-console’s version was recently bumped in F21
    and makes the higher release to win).
    [2.2.2-11]
  • Bump release because of gems
    [2.2.2-1]
  • Update to Ruby 2.2.2
    [2.2.1-10]
  • Fix libruby.so versions in SystemTap scripts (rhbz#1202232).
    [2.2.1-9]
  • Update to Ruby 2.2.1.
    [2.2.0-8]
  • Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code
    [2.2.0-7]
  • Fix directory ownership.
    [2.2.0-6]
  • Initialize all load paths in operating_system.rb.
    [2.2.0-5]
  • Make operating_system.rb more robust.
  • Add RubyGems stub headers for bundled gems.
    [2.2.0-4]
  • Add missing rubygem-test-unit dependency on rubygem-power_assert.
    [2.2.0-3]
  • Bump release to avoid EVR issue on rubygem-test-unit
    [2.2.0-1]
  • Upgrade to Ruby 2.2.0.
  • Explicitly list RubyGems directories to avoid accidentaly packaged content.
  • Split test-unit and power_assert gems into separate sub-packages.
  • Drop libdb dependency in favor of gdbm.
    [2.1.5-26]
  • Disbable sse2 on i668 (bug #1101811)
    [2.1.5-25]
  • Update to Ruby 2.1.5.
    [2.1.4-24]
  • Update to Ruby 2.1.4.
  • Include only vendor directories, not their content (rhbz#1114071).
  • Fix ‘invalid regex’ warning for non-rubygem packages (rhbz#1154067).
  • Use load macro introduced in RPM 4.12.
  • Mon Aug 18 2014 Fedora Release Engineering
  • Sun Jun 08 2014 Fedora Release Engineering
  • Wed May 21 2014 Jaroslav Skarvada
  • Rebuilt for https://fedoraproject.org/wiki/Changes/f21tcl86
    [2.1.2-21]
  • Update to Ruby 2.1.2
    [2.1.1-20]
  • Remove useless exclude (rhbz#1065897).
  • Extract load macro into external file and include it.
  • Kill bundled certificates.
    [2.1.1-19]
  • Correctly expand in some Makefiles, e.g. eruby.
    [2.1.1-18]
  • Update to Ruby 2.1.1.
  • Revert regression of Hash#reject.
    [2.1.0-19]
  • Add RPM dependency generators for RubyGems.
    [2.1.0-19]
  • Don’t link cert.pem explicitely
    [2.1.0-18]
  • Don’t generate documentation on unexpected places.
  • Detect if rubygems are running under rpmbuild and install gem binary
    extensions into appropriate place.
  • Add support for ppc64le arch (rhbz#1053263).
  • Re-enable some test cases, which are passing now with Kernel 3.12.8+.
  • Backport fix for floating point issues on i686.
    [2.1.0-17]
  • Upgrade to Ruby 2.1.0.
  • Move RPM macros into /usr/lib/rpm/macros.d directory.
  • Allow MD5 in OpenSSL for tests.
    [2.0.0.247-15]
  • Move Psych symlinks to vendor dir, to prevent F18 -> F19 upgrade issues
    (rhbz#988490).
    [2.0.0.247-14]
  • Add forgotten psych.rb link into rubygem-psych to fix ‘private method load’
    called for Psych:Moduler’ error (rhbz#979133).
    [2.0.0.247-13]
  • Fixes multilib conlicts of .gemspec files.
  • Make symlinks for psych gem to ruby stdlib dirs (rhbz#979133).
  • Use system-wide cert.pem.
    [2.0.0.247-12]
  • Fix RubyGems search paths when building gems with native extension
    (rhbz#979133).
    [2.0.0.247-11]
  • Fix RubyGems version.
    [2.0.0.247-10]
  • Better support for build without configuration (rhbz#977941).
    [2.0.0.247-9]
  • Update to Ruby 2.0.0-p247 (rhbz#979605).
  • Fix CVE-2013-4073.
  • Fix for wrong makefiles created by mkmf (rhbz#921650).
  • Add support for ABRT autoloading.
    [2.0.0.195-8]
  • Update to Ruby 2.0.0-p195 (rhbz#917374).
  • Fix object taint bypassing in DL and Fiddle (CVE-2013-2065).
  • Fix build against OpenSSL with enabled ECC curves.
  • Add aarch64 support (rhbz#926463).
    [2.0.0.0-7]
  • Macro definition moved into macros.ruby and macros.rubygems files.
  • Added filtering macros.
  • Filter automatically generated provides of private libraries (rhbz#947408).
    [2.0.0.0-6]
  • Fix RbConfig::CONFIG[‘exec_prefix’] returns empty string (rhbz#924851).
    [2.0.0.0-5]
  • Make Ruby buildable without rubypick.
  • Prevent random test failures.
    [2.0.0.0-4]
  • Don’t mark rpm config file as %config (fpc#259)
    [2.0.0.0-3]
  • Avoid ‘method redefined;’ warnings due to modified operating_system.rb.
  • Fix strange paths created during build of binary gems.
    [2.0.0.0-2]
  • Prevent squash of %gem_install with following line.
    [2.0.0.0-1]
  • Update to Ruby 2.0.0-p0.
  • Change %{ruby_extdir} to %{ruby_extdir_mri} in preparation for better
    JRuby support.
    [2.0.0.0-0.3.r39387]
  • Move test-unit.gemspec to -libs subpackage for now because rubygems
    2.0.0 does not create this
    [2.0.0.0-0.2.r39387]
  • Fix issues with wrong value of Rubygem’s shebang introduced in r39267.
    [2.0.0.0-0.1.r39387]
  • Upgrade to Ruby 2.0.0 (r39387).
  • Introduce %gem_install macro.
  • Build against libdb instead of libdb4 (rhbz#894022).
  • Move native extensions from exts to ruby directory.
  • Enable most of the PPC test suite.
  • Change ruby(abi) -> ruby(release).
  • Rename ruby executable to ruby-mri, to be prepared for RubyPick.
  • Add ruby(runtime_executable) virtual provide, which is later used
    by RubyPick.
  • RDoc now depends on JSON.
  • Try to make -doc subpackage noarch again, since the new RDoc should resolve
    the arch dependent issues (https://github.com/rdoc/rdoc/issues/71).
  • Enable SystemTap support.
  • Add TapSet for Ruby.
  • Split Psych into rubygem-psych subpackage.
    [1.9.3.385-28]
  • Update to 1.9.3 p385
    [1.9.3.374-27]
  • Update to 1.9.3 p374
  • Fix provided variables in pkgconfig (bug 789532:
    Vit Ondruch
    )
    [1.9.3.362-26]
  • Provide non-versioned pkgconfig file (bug 789532)
  • Use db5 on F-19 (bug 894022)
    [1.9.3.362-25]
  • Backport fix for the upstream PR7629, save the proc made from the given block
    (bug 895173)
    [1.9.3.362-24]
  • Update to 1.9.3.362
    [1.9.3.327-23]
  • Skipping test_parse.rb (fails on ARM at line 787)
  • http://bugs.ruby-lang.org/issues/6899
    [1.9.3.327-23]
  • Skip test_str_crypt (on rawhide) for now (upstream bug 7312)
    [1.9.3.327-22]
  • Ignore some network related tests
    [1.9.3.327-21]
  • Update to 1.9.3.327
  • Fix Hash-flooding DoS vulnerability on MurmurHash function
    (CVE-2012-5371)
    [1.9.3.286-19]
  • Update to 1.9.3 p286
  • Don’t create files when NUL-containing path name is passed
    (bug 865940, CVE-2012-4522)
    [1.9.3.194-18]
  • Patch from trunk for CVE-2012-4464, CVE-2012-4466
    [1.9.3.194-17]
  • Split documentation into -doc subpackage (rhbz#854418).
    [1.9.3.194-16]
  • Revert the dependency of ruby-libs on rubygems (rhbz#845011, rhbz#847482).
    [1.9.3.194-15]
  • ruby-libs must require rubygems (rhbz#845011).
    [1.9.3.194-14]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
    [1.9.3.194-13]
  • Make the bigdecimal gem a runtime dependency of Ruby.
    [1.9.3.194-12]
  • Make symlinks for bigdecimal and io-console gems to ruby stdlib dirs (RHBZ 829209).
    [1.9.3.194-11]
  • Fix license to contain Public Domain.
  • macros.ruby now contains unexpanded macros.
    [1.9.3.194-10.1]
  • Bump release
    [1.9.3.194-1]
  • Update to Ruby 1.9.3-p194.
    [1.9.3.125-3]
  • disable check on ppc(64), RH bugzilla 803698
    [1.9.3.125-2]
  • Temporarily disable make check on ARM until it’s fixed upstream. Tracked in RHBZ 789410
    [1.9.3.125-1]
  • Upgrade to Ruby 1.9.3-p125.
    [1.9.3.0-7]
  • Make mkmf.rb verbose by default
    [1.9.3.0-6]
  • Relax dependencies to allow external updates of bundled gems.
    [1.9.3.0-5]
  • Initial release of Ruby 1.9.3.
  • Add rubygems dependency on io-console for user interactions.
  • Gems license clarification.
    [1.9.3.0-4]
  • Bundled gems moved into dedicated directories and subpackages.
  • Create and own RubyGems directories for binary extensions.
  • Fix build with GCC 4.7.
    [1.9.3.0-3]
  • Fix RHEL build.
  • Fixed directory ownership.
  • Verose build output.
    [1.9.3.0-2]
  • Install RubyGems outside of Ruby directory structure.
  • RubyGems has not its own -devel subpackage.
  • Enhanced macros.ruby and macros.rubygems.
  • All tests are green now (bkabrda).
    [1.9.3.0-1]
  • Initial package
    [1.8.7.357-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
    [1.8.7.357-1]
  • Update to 1.8.7p357
  • Randomize hash on process startup (CVE-2011-4815, bug 750564)
    [1.8.7.352-2]
  • dont normalise arm cpus to arm
  • there is something weird about how ruby choses where to put bits
    [1.8.7.352-3]
  • F-17: kill gdbm support for now due to licensing compatibility issue
    [1.8.7.352-2]
  • F-17: rebuild against new gdbm
    [1.8.7.352-1]
  • Update to 1.8.7 p352
  • CVE-2011-2686 is fixed in this version (bug 722415)
  • Update ext/tk to the latest git
  • Remove duplicate path entry (bug 718695)
    [1.8.7.334-4]
  • Once fix FTBFS (bug 716021)
    [1.8.7.334-3]
  • normalise arm cpus to arm
    [1.8.7.334-2]
  • Own %{_normalized_cpu}-%{_target_os} directory (bug 708816)
    [1.8.7.334-1]
  • Update to 1.8.7 p334
    [1.8.7.330-3]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
    [1.8.7.330-2]
  • nomalise the 32 bit sparc archs to sparc
    [1.8.7.330-1]
  • Update to 1.8.7 p330
  • ext/tk updated to the newest header
    [1.8.7.302-2]
  • Avoid multilib conflict on -libs subpackage (bug 649174)
    [1.8.7.302-1]
  • Update to 1.8.7.302
  • CVE-2010-0541 (bug 587731) is fixed in this version
  • Update ext/tk to the latest head
    [1.8.7.299-5]
  • More cleanup of spec file, expecially for rpmlint issue
  • build ri files in %build
    [1.8.7.299-4]
  • Cleanup spec file
  • Make -irb, -rdoc subpackage noarch
  • Make dependencies between arch-dependent subpackages isa specific
  • Improve sample documentation gathering
    [1.8.7.299-3]
  • updated packaged based on feedback (from mtasaka)
  • added comments to all patches / sources
  • obsoleted ruby-mode, as it’s now provided by the emacs package itself
  • readded missing documentation
  • various small compatability/regression fixes
    [1.8.7.299-2]
  • readded bits to pull tk package from upstream source branch
  • removed unecessary .tk.old dir
  • renamed macros which may cause confusion, removed unused ones
    [1.8.7.299-1]
  • integrate more of jmeyering’s and mtaska’s feedback
  • removed emacs bits that are now shipped with the emacs package
  • various patch and spec cleanup
  • rebased to ruby 1.8.7 patch 299, removed patches no longer needed:
    ruby-1.8.7-openssl-1.0.patch, ruby-1.8.7-rb_gc_guard_ptr-optimization.patch
    [1.8.7.249-5]
  • Various fixes
    [1.8.7.249-4]
  • Fixed incorrect paths in 1.8.7 rpm
    [1.8.7.249-3]
  • Integrated Jim Meyering’s feedback and changes in to:
  • remove trailing blanks
  • placate rpmlint
  • ruby_* definitions: do not use trailing slashes in directory names
  • _normalized_cpu: simplify definition
    [1.8.7.249-2]
  • Integrate mtasaka’s feedback and changes
  • patch101 ruby_1_8_7-rb_gc_guard_ptr-optimization.patch
    [1.8.7.249-1]
  • Initial Ruby 1.8.7 specfile
    [1.8.6.399-5]
  • Retry for bug 559158, Simplify the OpenSSL::Digest class
    pull more change commits from ruby_1_8 branch
    [1.8.6.399-4]
  • Patch36 (ruby-1.8.x-RHASH_SIZE-rb_hash_lookup-def.patch)
    also backport rb_hash_lookup definition (bug 592936)
    [1.8.6.399-3]
  • ruby-1.8.x-null-class-must-be-Qnil.patch (bug 530407)
  • Recreate some patches using upstream svn when available, and
    add some comments for patches
    [1.8.6.399-2]
  • tcltk: Give up using potentially unmaintained ruby_1_8_6 branch
    and instead completely replace with ruby_1_8 branch head
    (at this time, using rev 27738)
    (seems to fix 560053, 590503)
  • Fix Japanese encoding strings under ruby-tcltk/ext/tk/sample/
    [1.8.6.399-1]
  • Update to 1.8.6 p 399 (bug 579675)
  • Patch to fix gc bug causing open4 crash (bug 580993)
    [1.8.6.388-9]
  • F-14: rebuild against new gdbm
  • Thu Jan 28 2010 Mamoru Tasaka
  • Once revert the previous change (patch34)
    [1.8.6.388-8]
  • Backport openssl/digest functions providing digest and hexdigest functions
    directly in OpenSSL::Digest.methods
  • Make sure that Red Hat people version their changelog entries
  • This is actually release #1, but now needs to be release #7
    [1.8.6.388-1]
  • Add conditional for RHEL.
    [1.8.6.383-6]
  • CVE-2009-4492 ruby WEBrick log escape sequence (bug 554485)
    [1.8.6.383-5]
  • Change mkmf.rb to use LIBRUBYARG_SHARED so that have_library() works
    without libruby-static.a (bug 428384)
  • And move libruby-static.a to -static subpackage
    [1.8.6.383-4]
  • Use bison to regenerate parse.c to keep the original format of error
    messages (bug 530275 comment 4)
    [1.8.6.383-3]
  • Patch so that irb saves its history (bug 518584, ruby issue 1556)
    [1.8.6.383-2]
  • Update to 1.8.6 patchlevel 383 (bug 520063)
    [1.8.6.369-5]
  • Much better idea for Patch31 provided by Akira TAGOH
    [1.8.6.369-4]
  • Fix the search path of ri command for ri manuals installed with gem
    (bug 528787)
    [1.8.6.369-3]
  • Rebuild against new openssl
    [1.8.6.369-2]
  • Make sure that readline.so is linked against readline 5 because
    Ruby is under GPLv2
    [1.8.6.369-1]
  • New patchlevel fixing CVE-2009-1904
  • Fix directory on ARM (#506233, Kedar Sovani)
    [1.8.6.368-1]
  • New upstream release (p368)
    [1.8.6.287-8]
  • Merge Review fix (#226381)
    [1.8.6.287-7]
  • Fix regression in CVE-2008-3790 (#485383)
    [1.8.6.287-6]
  • Again use -O2 optimization level
  • i586 should search i386-linux directory (on <= F-11)
    [1.8.6.287-5]
  • Rebuild for gcc4.4
    [1.8.6.287-3]
  • CVE-2008-5189: CGI header injection.
    [1.8.6.287-2]
  • CVE-2008-3790: DoS vulnerability in the REXML module.
    [1.8.6.287-1]
  • New upstream release.
  • Security fixes.
    • CVE-2008-3655: Ruby does not properly restrict access to critical
      variables and methods at various safe levels.
    • CVE-2008-3656: DoS vulnerability in WEBrick.
    • CVE-2008-3657: Lack of taintness check in dl.
    • CVE-2008-1447: DNS spoofing vulnerability in resolv.rb.
    • CVE-2008-3443: Memory allocation failure in Ruby regex engine.
  • Remove the unnecessary backported patches.
    [1.8.6.230-5]
  • rebuild against db4-4.7
    [1.8.6.230-4]
  • Backported from upstream SVN to fix a segfault issue with Array#fill.
    [1.8.6.230-3]
  • Backported from upstream SVN to fix a segfault issue. (#452825)
  • Backported from upstream SVN to fix an integer overflow in rb_ary_fill.
    [1.8.6.230-2]
  • Fix a segfault issue. (#452810)
    [1.8.6.230-1]
  • New upstream release.
  • Security fixes. (#452295)
    • CVE-2008-1891: WEBrick CGI source disclosure.
    • CVE-2008-2662: Integer overflow in rb_str_buf_append().
    • CVE-2008-2663: Integer overflow in rb_ary_store().
    • CVE-2008-2664: Unsafe use of alloca in rb_str_format().
    • CVE-2008-2725: Integer overflow in rb_ary_splice().
    • CVE-2008-2726: Integer overflow in rb_ary_splice().
  • ruby-1.8.6.111-CVE-2007-5162.patch: removed.
  • Build ruby-mode package for all archtectures.
    [1.8.6.114-1]
  • Security fix for CVE-2008-1145.
  • Improve a spec file. (#226381)
    • Correct License tag.
    • Fix a timestamp issue.
    • Own a arch-specific directory.
      [1.8.6.111-9]
  • Autorebuild for GCC 4.3
    [1.8.6.111-8]
  • Rebuild for gcc-4.3.
    [1.8.6.111-7]
  • Revert the change of libruby-static.a. (#428384)
    [1.8.6.111-6]
  • Fix an unnecessary replacement for shebang. (#426835)
    [1.8.6.111-5]
  • Rebuild.
    [1.8.6.111-4]
  • Clean up again.
    [1.8.6.111-3]
  • Clean up the spec file.
  • Remove ruby-man-1.4.6 stuff. this is entirely the out-dated document.
    this could be replaced by ri.
  • Disable the static library building.
    [1.8.6.111-2]
  • Rebuild for openssl bump
  • Wed Oct 31 2007 Akira TAGOH
  • Fix the dead link.
    [1.8.6.111-1]
  • New upstream release.
  • ruby-1.8.6.111-CVE-2007-5162.patch: Update a bit with backporting the changes
    at trunk to enable the fix without any modifications on the users’ scripts.
    Note that Net::HTTP#enable_post_connection_check isn’t available anymore.
    If you want to disable this post-check, you should give OpenSSL::SSL::VERIFY_NONE
    to Net::HTTP#verify_mode= instead of.
    [1.8.6.110-2]
  • Enable pthread support for ppc too. (#201452)
  • Fix unexpected dependencies appears in ruby-libs. (#253325)
    [1.8.6.110-1]
  • New upstream release.
    • ruby-r12567.patch: removed.
  • ruby-1.8.6-CVE-2007-5162.patch: security fix for Net::HTTP that is
    insufficient verification of SSL certificate.
    [1.8.6.36-4]
  • Rebuild
  • Fri Aug 10 2007 Akira TAGOH
  • Update License tag.
    [1.8.6.36-3]
  • ruby-r12567.patch: backport patch from upstream svn to get rid of
    the unnecessary declarations. (#245446)
    [1.8.6.36-2]
  • New upstream release.
    • Fix Etc::getgrgid to get the correct gid as requested. (#236647)
      [1.8.6-2]
  • Fix search path breakage. (#234029)
    [1.8.6-1]
  • New upstream release.
  • clean up a spec file.
    [1.8.5.12-2]
  • Rebuild
    [1.8.5.12-1]
  • New upstream release.
    [1.8.5.2-1]
  • security fix release.
    [1.8.5-4]
  • security fix release.
  • ruby-1.8.5-cgi-CVE-2006-5467.patch: fix a CGI multipart parsing bug that
    causes the denial of service. (#212396)
    [1.8.5-3]
  • rebuilt for unwind info generation, broken in gcc-4.1.1-21
    [1.8.5-2]
  • fixed rbconfig.rb to refer to DESTDIR for sitearchdir. (#207311)
    [1.8.5-1]
  • New upstream release.
  • removed the unnecessary patches:
    • ruby-1.8.4-no-eaccess.patch
    • ruby-1.8.4-64bit-pack.patch
    • ruby-1.8.4-fix-insecure-dir-operation.patch
    • ruby-1.8.4-fix-insecure-regexp-modification.patch
    • ruby-1.8.4-fix-alias-safe-level.patch
  • build with --enable-pthread except on ppc.
  • ruby-1.8.5-hash-memory-leak.patch: backported from CVS to fix a memory leak
    on Hash. [ruby-talk:211233]
    [1.8.4-12]
  • owns sitearchdir. (#201208)
    [1.8.4-11]
  • security fixes [CVE-2006-3694]
    • ruby-1.8.4-fix-insecure-dir-operation.patch:
    • ruby-1.8.4-fix-insecure-regexp-modification.patch: fixed the insecure
      operations in the certain safe-level restrictions. (#199538)
    • ruby-1.8.4-fix-alias-safe-level.patch: fixed to not bypass the certain
      safe-level restrictions. (#199543)
      [1.8.4-10.fc6.1]
  • rebuild
    [1.8.4-10]
  • fixed the wrong file list again. moved tcltk library into ruby-tcltk.
    (#195872)
    [1.8.4-8]
  • ruby-deprecated-sitelib-search-path.patch: correct the order of search path.
    [1.8.4-7]
  • exclude ppc64 to make ruby-mode package. right now emacs.ppc64 isn’t provided
    and buildsys became much stricter.
  • ruby-deprecated-sitelib-search-path.patch: applied to add more search path
    for backward compatiblity.
  • added byacc to BuildReq. (#194161)
    [1.8.4-6]
  • ruby-deprecated-search-path.patch: added the deprecated installation paths
    to the search path for the backward compatibility.
  • added a Provides: ruby(abi) to ruby-libs.
  • ruby-1.8.4-64bit-pack.patch: backport patch from upstream to fix unpack(‘l’)
    not working on 64bit arch and integer overflow on template ‘w’. (#189350)
  • updated License tag to be more comfortable, and with a pointer to get more
    details, like Python package does. (#179933)
  • clean up.
  • Wed Apr 19 2006 Akira TAGOH
  • ruby-rubyprefix.patch: moved all arch-independent modules under /usr/lib/ruby
    and keep arch-dependent modules under /usr/lib64/ruby for 64bit archs.
    so ‘rubylibdir’, ‘sitelibdir’ and ‘sitedir’ in Config::CONFIG points to
    the kind of /usr/lib/ruby now. (#184199)
    [1.8.4-4]
  • correct sitelibdir. (#184198)
    [1.8.4-3.2]
  • bump again for double-long bug on ppc(64)
    [1.8.4-3.1]
  • rebuilt for new gcc4.1 snapshot and glibc changes
    [1.8.4-3]
  • ruby-1.8.4-no-eaccess.patch: backported from ruby CVS to avoid conflict
    between newer glibc. (#179835)
    [1.8.4-2]
  • ruby-tcltk-multilib.patch: fixed a typo.
    [1.8.4-1]
  • New upstream release.
    • fixed a missing return statement. (#140833)
    • fixed an use of uninitialized variable. (#144890)
      [1.8.4-0.4.preview2]
  • updates to 1.8.4-preview2.
  • renamed the packages to ruby-* (#175765)
    • irb -> ruby-irb
    • rdoc -> ruby-rdoc
    • ri -> ruby-ri
  • added tcl-devel and tk-devel into BuildRequires.
  • Fri Dec 09 2005 Jesse Keating
  • rebuilt
    [1.8.4-0.3.preview1]
  • rebuilt against the latest openssl.
    [1.8.4-0.2.preview1]
  • build-deps libX11-devel instead of xorg-x11-devel.
    [1.8.4-0.1.preview1]
  • New upstream release.
  • ruby-1.8.2-strscan-memset.patch: removed because it’s no longer needed.
    [1.8.3-4]
  • moved the documents from ruby-libs to ruby-docs, which contains the arch
    specific thing and to be multilib support. (#168826)
    [1.8.3-3]
  • fixed the wrong file list. the external library for tcl/tk was included
    in ruby-libs unexpectedly.
    [1.8.3-2]
  • ruby-multilib.patch: added another chunk for multilib. (#169127)
    [1.8.3-1]
  • New upstream release.
  • Build-Requires xorg-x11-devel instead of XFree86-devel.
  • ruby-multilib.patch: applied for only 64-bit archs.
  • ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: removed. it has already been in upstream.
    [1.8.2-9]
  • ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: fixed the arbitrary command execution
    on XMLRPC server. (#161096)
    [1.8.2-8]
  • ruby-1.8.2-tcltk-multilib.patch: applied to get tcltklib.so built. (#160194)
    [1.8.2-7]
  • ruby-1.8.2-deadcode.patch: removed the dead code from the source. (#146108)
  • make sure that all documentation files in ruby-docs are the world-
    readable. (#147279)
    [1.8.2-6]
  • ruby-1.8.2-strscan-memset.patch: fixed an wrong usage of memset(3).
    [1.8.2-5]
  • rebuilt
    [1.8.2-4]
  • fixed the wrong generation of file manifest. (#146055)
  • spec file clean up.
    [1.8.2-3]
  • separated out to rdoc package.
  • make the dependency of irb for rdoc. (#144708)
    [1.8.2-2]
  • Rebuilt for new readline.
    [1.8.2-1]
  • New upstream release.
  • ruby-1.8.1-ia64-stack-limit.patch: removed - it’s no longer needed.
  • ruby-1.8.1-cgi_session_perms.patch: likewise.
  • ruby-1.8.1-cgi-dos.patch: likewise.
  • generated Ruby interactive documentation - senarated package.
    it’s now provided as ri package. (#141806)
    [1.8.1-10]
  • rebuild against db-4.3.21.
    [1.8.1-9]
  • ruby-1.8.1-cgi-dos.patch: security fix [CAN-2004-0983]
  • ruby-1.8.1-cgi_session_perms.patch: security fix [CAN-2004-0755]
    [1.8.1-8]
  • added openssl-devel and db4-devel into BuildRequires (#137479)
    [1.8.1-7]
  • require emacs-common instead of emacs.
    [1.8.1-4]
  • updated the documentation.
  • Tue Jun 15 2004 Elliot Lee
  • rebuilt
  • Tue Mar 02 2004 Elliot Lee
  • rebuilt
  • Fri Feb 13 2004 Elliot Lee
  • rebuilt
    [1.8.1-1]
  • New upstream release.
  • don’t use any optimization for ia64 to avoid the build failure.
  • ruby-1.8.1-ia64-stack-limit.patch: applied to fix SystemStackError when the optimization is disabled.
    [1.8.0-3]
  • rebuild against db-4.2.52.
    [1.8.0-2]
  • rebuild against db-4.2.42.
    [1.8.0-1]
  • New upstream release.
    [1.6.8-9.1]
  • rebuilt
    [1.6.8-9]
  • ruby-1.6.8-castnode.patch: handling the nodes with correct cast.
    use this patch now instead of ruby-1.6.8-fix-x86_64.patch.
    [1.6.8-8]
  • rebuilt
    [1.6.8-7]
  • fix the gcc warnings. (#82192)
  • ruby-1.6.8-fix-x86_64.patch: correct a patch.
    NOTE: DON’T USE THIS PATCH FOR BIG ENDIAN ARCHITECTURE.
  • ruby-1.6.7-long2int.patch: removed.
  • Wed Jun 04 2003 Elliot Lee
  • rebuilt
    [1.6.8-5]
  • rebuild against ucs4 tcltk
  • Wed Jan 22 2003 Tim Powers
  • rebuilt
    [1.6.8-3]
  • ruby-1.6.8-multilib.patch: applied to fix the search path issue on x86_64
    [1.6.8-2]
  • ruby-1.6.8-require.patch: applied to fix the search bug in require.
  • don’t apply long2int patch to s390 and s390x. it doesn’t work.
    [1.6.8-1]
  • New upstream release.
  • removed some patches. it’s no longer needed.
    • ruby-1.6.7-100.patch
    • ruby-1.6.7-101.patch
    • ruby-1.6.7-102.patch
    • ruby-1.6.7-103.patch
    • 801_extmk.rb-shellwords.patch
    • 801_mkmf.rb-shellwords.patch
    • 804_parse.y-new-bison.patch
    • 805_uri-bugfix.patch
    • ruby-1.6.6-900_XXX_strtod.patch
    • ruby-1.6.7-sux0rs.patch
    • ruby-1.6.7-libobj.patch
      [1.6.7-14]
  • rebuild to update tcltk deps
    [1.6.7-13]
  • Remove ExcludeArch: x86_64
  • Fix x86_64 ruby with long2int.patch (ruby was assuming that sizeof(long)
    == sizeof(int). The patch does not fix the source of the problem, just
    makes it a non-issue.)
  • _smp_mflags
    [1.6.7-12]
  • rebuild to fix broken tcltk deps
    [1.6.7-11]
  • use %configure macro instead of configure script.
  • use the latest config.{sub,guess}.
  • get archname from rbconfig.rb for %dir
  • applied some patches from Debian:
    • 801_extmk.rb-shellwords.patch: use Shellwords
    • 801_mkmf.rb-shellwords.patch: mkmf.rb creates bad Makefile. the Makefile
      links libruby.a to the target.
    • 803_sample-fix-shbang.patch: all sample codes should be
      s|/usr/local/bin|/usr/bin|g
    • 804_parse.y-new-bison.patch: fix syntax warning.
    • 805_uri-bugfix.patch: uri.rb could not handle correctly broken mailto-uri.
  • add ExcludeArch x86_64 temporarily to fix Bug#74581. Right now ruby can’t be
    built on x86_64.
    [1.6.7-10]
  • moved sitedir to /usr/lib/ruby/site_ruby again according as our perl and
    python.
  • ruby-1.6.7-resolv1.patch, ruby-1.6.7-resolv2.patch: applied to fix ‘Too many
    open files - ‘/etc/resolv.conf’’ issue. (Bug#64830)
    [1.6.7-9]
  • add the owned directory.
    [1.6.7-8]
  • fix typo.
    [1.6.7-7]
  • removed the ruby-mode-xemacs because it’s merged to the xemacs sumo.
  • Fri Jun 21 2002 Tim Powers
  • automated rebuild
    [1.6.7-5]
  • fix the stripped binary.
  • use the appropriate macros.
  • Sun May 26 2002 Tim Powers
  • automated rebuild
    [1.6.7-3]
  • ruby-1.6.7-libobj.patch: applied to fix autoconf2.53 error.
    [1.6.7-2]
  • ruby-man-1.4.6-jp.tar.bz2: removed.
  • ruby-refm-rdp-1.4.7-ja-html.tar.bz2: uses it instead of.
  • ruby-1.6.7-500-marshal-proc.patch, ruby-1.6.7-501-class-var.patch:
    removed.
  • ruby-1.6.7-100.patch: applied a bug fix patch.
    (ruby-dev#16274: patch for ‘wm state’)
    (PR#206ja: SEGV handle EXIT)
  • ruby-1.6.7-101.patch: applied a bug fix patch.
    (ruby-list#34313: singleton should not be Marshal.dump’ed)
    (ruby-dev#16411: block local var)
  • ruby-1.6.7-102.patch: applied a bug fix patch.
    (handling multibyte chars is partially broken)
  • ruby-1.6.7-103.patch: applied a bug fix patch.
    (ruby-dev#16462: preserve reference for GC, but link should be cut)
    [1.6.7-1]
  • New upstream release.
  • ruby-1.6.6-100.patch, ruby-1.6.6-501-ruby-mode.patch:
    removed. these patches no longer should be needed.
  • ruby-1.6.7-500-marshal-proc.patch: applied a fix patch.
    (ruby-dev#16178: Marshal::dump should call Proc#call.)
  • ruby-1.6.7-501-class-var.patch: applied a fix patch.
    (ruby-talk#35157: class vars broken in 1.6.7)
    [1.6.6-5]
  • Disable alpha because nothing is xemacs for alpha now.
    [1.6.6-3]
  • Fixed the duplicate files.
    [1.6.6-2]
  • Fixed the missing %defattr
    [1.6.6-1]
  • New upstream release.
  • Applied bug fix patches:
    • ruby-1.6.6-501-ruby-mode.patch: ruby-talk#30479: disables font-lock
      coloring.
    • ruby-1.6.6-100.patch: ruby-talk#30203: Ruby 1.6.6 bug and fix
      ruby-list#33047: regex bug
      PR#230: problem with -d in 1.6.6
  • Added ruby-mode and ruby-mode-xemacs packages.
  • Ruby works fine for ia64. so re-enable to build with ia64.
    (probably it should be worked for alpha)
  • Wed Jan 09 2002 Tim Powers
  • automated rebuild
    [1.6.4-2]
  • Remove Japanese description and summaries; they belong in specspo and
    break rpm
  • Clean up specfile
  • Mark language specific files (README.jp) as such
  • bzip2 sources
  • rename the libruby package to ruby-libs for consistency
  • Exclude ia64 (doesn’t build - the code doesn’t seem to be 64-bit clean
    [has been excluded on alpha forever])
    [1.6.4-1]
  • rebuild for Red Hat 7.2
  • Mon Jun 04 2001 akira yamada
  • upgrade to nwe upstream version 1.6.4.
  • Mon Apr 02 2001 akira yamada
  • applied patch:
    • fixed method cache bug. etc. (Patch103, Patch104)
  • Tue Mar 27 2001 akira yamada
  • applied patch:
    • fixed marshal for bignum bug.
    • fixed scope of constant variables bug.
  • Tue Mar 20 2001 akira yamada
  • upgraded to new upstream version 1.6.3.
  • Fri Feb 09 2001 akira yamada
  • fixed bad group for libruby.
  • Applied patch: upgraded to cvs version (2001-02-08):
    fixed minor bugs.
  • Thu Jan 18 2001 akira yamada
  • Applied patch: upgraded to cvs version (2001-01-15):
    fixed minor bugs(e.g. ruby makes extention librares too large…).
  • Wed Jan 10 2001 akira yamada
  • Applied patch: upgraded to cvs version (2001-01-09):
    fixed minor bugs.
  • Sat Dec 30 2000 akira yamada
  • Applied bug fix patch.
  • Mon Dec 25 2000 akira yamada
  • Updated to new upstream version 1.6.2.
  • Fri Dec 22 2000 akira yamada
  • Removed ruby_cvs.2000122019.patch, added ruby_cvs.2000122215.patch
    (upgraded ruby to latest cvs version, 1.6.2-preview4).
  • Wed Dec 20 2000 akira yamada
  • Removed ruby_cvs.2000121413.patch, added ruby_cvs.2000122019.patch
    (upgraded ruby to latest cvs version).
  • new package: libruby
  • Thu Dec 14 2000 akira yamada
  • Removed ruby_cvs.2000101901.patch, added ruby_cvs.2000121413.patch
    (upgraded ruby to latest cvs version).
  • Removed ruby-dev.11262.patch, ruby-dev.11265.patch,
    and ruby-dev.11268.patch (included into above patch).
    [1.6.1-0vl9]
  • build on gcc-2.95.3
  • Thu Oct 19 2000 akira yamada
  • Added ruby-dev.11268.patch.
  • Thu Oct 19 2000 akira yamada
  • Removed ruby_cvs.2000101117.patch and added ruby_cvs.2000101901.patch
    (upgraded ruby to latest cvs version).
  • Added ruby-dev.11262.patch.
  • Added ruby-dev.11265.patch.
  • Wed Oct 11 2000 akira yamada
  • Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000101117.patch
    (upgraded ruby to latest cvs version).
  • Mon Oct 09 2000 akira yamada
  • Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).
  • Tue Oct 03 2000 akira yamada
  • Removed ruby_cvs.2000100218.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).
  • Mon Oct 02 2000 akira yamada
  • Removed ruby_cvs.2000092718.patch and added ruby_cvs.2000100218.patch
    (upgraded ruby to latest cvs version).
  • Wed Sep 27 2000 akira yamada
  • Updated to upstream version 1.6.1.
  • Removed ruby_cvs.2000082901.patch and added ruby_cvs.2000092718.patch
    (upgraded ruby to latest cvs version).
  • Tue Aug 29 2000 akira yamada
  • Updated to version 1.4.6.
  • removed ruby-dev.10123.patch(included into ruby-1.4.6).
  • Added ruby_cvs.2000082901.patch(upgraded ruby to latest cvs version).
  • Tue Jun 27 2000 akira yamada
  • Updated manuals to version 1.4.5.
  • Sun Jun 25 2000 akira yamada
  • Added ruby-dev.10123.patch.
  • Sat Jun 24 2000 akira yamada
  • Updated to version 1.4.5.
  • Removed ruby_cvs.2000062401.patch(included into ruby-1.4.5).
  • Thu Jun 22 2000 akira yamada
  • Updated to version 1.4.4(06/22/2000 CVS).
  • Removed ruby-dev.10054.patch(included into ruby_cvs.patch).
  • Thu Jun 22 2000 akira yamada
  • Renamed to ruby_cvs20000620.patch from ruby_cvs.patch.
  • Tue Jun 20 2000 akira yamada
  • Updated to version 1.4.4(06/20/2000 CVS).
  • Removed ruby-list.23190.patch(included into ruby_cvs.patch).
  • Added ruby-dev.10054.patch.
  • Thu Jun 15 2000 akira yamada
  • Updated to version 1.4.4(06/12/2000 CVS).
  • Added manuals and FAQs.
  • Split into ruby, ruby-devel, ruby-tcltk, ruby-docs, irb.
  • Tue Jun 13 2000 Mitsuo Hamada
  • Updated to version 1.4.4
  • Wed Dec 08 1999 Atsushi Yamagata
  • Updated to version 1.4.3
  • Mon Sep 20 1999 Atsushi Yamagata
  • Updated to version 1.4.2 (Sep 18)
  • Fri Sep 17 1999 Atsushi Yamagata
  • Updated to version 1.4.2
  • Tue Aug 17 1999 Atsushi Yamagata
  • Updated to version 1.4.0
  • Fri Jul 23 1999 Atsushi Yamagata
  • 2nd release
  • Updated to version 1.2.6(15 Jul 1999)
  • striped %{prefix}/bin/ruby
  • Mon Jun 28 1999 Atsushi Yamagata
  • Updated to version 1.2.6(21 Jun 1999)
  • Wed Apr 14 1999 Atsushi Yamagata
  • Updated to version 1.2.5
  • Fri Apr 09 1999 Atsushi Yamagata
  • Updated to version 1.2.4
  • Fri Dec 25 1998 Toru Hoshina
  • Version up to 1.2 stable.
  • Fri Nov 27 1998 Toru Hoshina
  • Version up to 1.1c9.
  • Thu Nov 19 1998 Toru Hoshina
  • Version up to 1.1c8, however it appear short life :-P
  • Fri Nov 13 1998 Toru Hoshina
  • Version up.
  • Tue Sep 22 1998 Toru Hoshina
  • Mon Sep 21 1998 Toru Hoshina
  • Modified SPEC in order to install libruby.a so that it should be used by
    another ruby entention.
  • 2nd release.
  • Mon Mar 09 1998 Shoichi OZAWA
  • Added a powerPC arch part. Thanks, MURATA Nobuhiro

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.0%