|
|
|
|
Changelog for ruby-devel-1.8.5-5.SEL5_5.8.i386.rpm :
* Thu Dec 15 2011 Eddy Nigg - Rebuild for StartCom Linux 5.0.x * Wed Jun 29 2011 Snir Ifrah - Rebuild for StartCom Linux 5.0.x * Fri Dec 11 2009 Akira TAGOH - 1.8.5-5.el5_4.8- Fix a regression of the fix in BigDecimal that suppress the zero after the decimal point in Float. (#546245) * Thu Jun 18 2009 Akira TAGOH - 1.8.5-5.el5_3.7- security fixes. (#505087)- CVE-2007-1558: APOP password disclosure vulnerability.- CVE-2009-0642: Incorrect checks for validity of X.509 certificates.- CVE-2009-1904: DoS vulnerability in BigDecimal. * Wed Nov 19 2008 Akira TAGOH - 1.8.5-5.el5_2.6- security fix (#470262)- CVE-2008-4310: real fix for CVE-2008-3656. original patch named as fix for CVE-2008-3656 actually fixed different issue (CVE-2008-1145), hence we are providing correct patch and renaming original patch to refer to proper CVE. * Thu Oct 09 2008 Akira TAGOH - 1.8.5-5.el5_2.5- Build with -fno-strict-aliasing. * Thu Oct 09 2008 Akira TAGOH - 1.8.5-5.el5_2.4- security fixes. (#461590)- CVE-2008-3655: multiple insufficient safe mode restrictions.- CVE-2008-1145: WEBrick DoS vulnerability (CPU consumption).- CVE-2008-3657: missing \"taintness\" checks in dl module.- CVE-2008-3905: use of predictable source port and transaction id in DNS requests done by resolv.rb module.- CVE-2008-3443: Memory allocation failure in Ruby regex engine (remotely exploitable DoS).- CVE-2008-3790: DoS vulnerability in the REXML module. * Thu Jul 03 2008 Akira TAGOH - 1.8.5-5.el5_2.3- CVE-2008-2376: Integer overflow in rb_ary_fill(). * Tue Jun 24 2008 Akira TAGOH - 1.8.5-5.el5_2.1- security fixes. (#451928)- CVE-2008-2662: Integer overflow in rb_str_buf_append().- CVE-2008-2663: Integer overflow in rb_ary_store().- CVE-2008-2664: Unsafe use of alloca in rb_str_format().- CVE-2008-2725: Integer overflow in rb_ary_splice().- CVE-2008-2726: Integer overflow in rb_ary_splice(). * Thu Nov 01 2007 Akira TAGOH - 1.8.5-5.el5_1.1- security fix for CVE-2007-5162 and CVE-2007-5770- ruby-1.8.5-CVE-2007-5162.patch: fix issues that is insufficient verification of SSL certificate. (#320331)- Fix the multilib regression issue. * Mon Dec 11 2006 Akira TAGOH - 1.8.5-5- security fix release.- ruby-1.8.5-cgi-CVE-2006-6303.patch: fix a infinite loop with certain HTTP request. (#218290) * Sat Oct 28 2006 Akira TAGOH - 1.8.5-4- security fix release.- ruby-1.8.5-cgi-CVE-2006-5467.patch: fix a CGI multipart parsing bug that causes the denial of service. (#212396) * Mon Oct 02 2006 Jesse Keating - 1.8.5-3- rebuilt for unwind info generation, broken in gcc-4.1.1-21 * Wed Sep 27 2006 Akira TAGOH - 1.8.5-2- fixed rbconfig.rb to refer to DESTDIR for sitearchdir. (#207311) * Tue Aug 29 2006 Akira TAGOH - 1.8.5-1- New upstream release.- removed the unnecessary patches: - ruby-1.8.4-no-eaccess.patch - ruby-1.8.4-64bit-pack.patch - ruby-1.8.4-fix-insecure-dir-operation.patch - ruby-1.8.4-fix-insecure-regexp-modification.patch - ruby-1.8.4-fix-alias-safe-level.patch- build with --enable-pthread except on ppc.- ruby-1.8.5-hash-memory-leak.patch: backported from CVS to fix a memory leak on Hash. [ruby-talk:211233] * Tue Aug 08 2006 Akira TAGOH - 1.8.4-12- owns sitearchdir. (#201208) * Fri Jul 21 2006 Akira TAGOH - 1.8.4-11- security fixes [CVE-2006-3694] - ruby-1.8.4-fix-insecure-dir-operation.patch: - ruby-1.8.4-fix-insecure-regexp-modification.patch: fixed the insecure operations in the certain safe-level restrictions. (#199538) - ruby-1.8.4-fix-alias-safe-level.patch: fixed to not bypass the certain safe-level restrictions. (#199543) * Thu Jul 13 2006 Jesse Keating - 1.8.4-10.fc6.1- rebuild * Tue Jun 20 2006 Akira TAGOH - 1.8.4-10- fixed the wrong file list again. moved tcltk library into ruby-tcltk. (#195872) * Fri Jun 09 2006 Akira TAGOH - 1.8.4-8- ruby-deprecated-sitelib-search-path.patch: correct the order of search path. * Thu Jun 08 2006 Akira TAGOH - 1.8.4-7- exclude ppc64 to make ruby-mode package. right now emacs.ppc64 isn\'t provided and buildsys became much stricter.- ruby-deprecated-sitelib-search-path.patch: applied to add more search path for backward compatiblity.- added byacc to BuildReq. (#194161) * Thu May 18 2006 Akira TAGOH - 1.8.4-6- ruby-deprecated-search-path.patch: added the deprecated installation paths to the search path for the backward compatibility.- added a Provides: ruby(abi) to ruby-libs.- ruby-1.8.4-64bit-pack.patch: backport patch from upstream to fix unpack(\"l\") not working on 64bit arch and integer overflow on template \"w\". (#189350)- updated License tag to be more comfortable, and with a pointer to get more details, like Python package does. (#179933)- clean up. * Thu Apr 20 2006 Akira TAGOH - ruby-rubyprefix.patch: moved all arch-independent modules under /usr/lib/ruby and keep arch-dependent modules under /usr/lib64/ruby for 64bit archs. so \'rubylibdir\', \'sitelibdir\' and \'sitedir\' in Config::CONFIG points to the kind of /usr/lib/ruby now. (#184199) * Tue Apr 18 2006 Akira TAGOH - 1.8.4-4- correct sitelibdir. (#184198) * Fri Feb 10 2006 Jesse Keating - 1.8.4-3.2- bump again for double-long bug on ppc(64) * Tue Feb 07 2006 Jesse Keating - 1.8.4-3.1- rebuilt for new gcc4.1 snapshot and glibc changes * Mon Feb 06 2006 Akira TAGOH - 1.8.4-3- ruby-1.8.4-no-eaccess.patch: backported from ruby CVS to avoid conflict between newer glibc. (#179835) * Wed Jan 04 2006 Akira TAGOH - 1.8.4-2- ruby-tcltk-multilib.patch: fixed a typo. * Tue Dec 27 2005 Akira TAGOH - 1.8.4-1- New upstream release. - fixed a missing return statement. (#140833) - fixed an use of uninitialized variable. (#144890) * Fri Dec 16 2005 Akira TAGOH - 1.8.4-0.4.preview2- updates to 1.8.4-preview2.- renamed the packages to ruby- * (#175765) - irb -> ruby-irb - rdoc -> ruby-rdoc - ri -> ruby-ri- added tcl-devel and tk-devel into BuildRequires. * Fri Dec 09 2005 Jesse Keating - rebuilt * Thu Nov 10 2005 Akira TAGOH - 1.8.4-0.3.preview1- rebuilt against the latest openssl. * Tue Nov 01 2005 Akira TAGOH - 1.8.4-0.2.preview1- build-deps libX11-devel instead of xorg-x11-devel. * Mon Oct 31 2005 Akira TAGOH - 1.8.4-0.1.preview1- New upstream release.- ruby-1.8.2-strscan-memset.patch: removed because it\'s no longer needed. * Wed Oct 05 2005 Akira TAGOH - 1.8.3-4- moved the documents from ruby-libs to ruby-docs, which contains the arch specific thing and to be multilib support. (#168826) * Tue Oct 04 2005 Akira TAGOH - 1.8.3-3- fixed the wrong file list. the external library for tcl/tk was included in ruby-libs unexpectedly. * Tue Sep 27 2005 Akira TAGOH - 1.8.3-2- ruby-multilib.patch: added another chunk for multilib. (#169127) * Thu Sep 22 2005 Akira TAGOH - 1.8.3-1- New upstream release.- Build-Requires xorg-x11-devel instead of XFree86-devel.- ruby-multilib.patch: applied for only 64-bit archs.- ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: removed. it has already been in upstream. * Wed Jun 22 2005 Akira TAGOH - 1.8.2-9- ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: fixed the arbitrary command execution on XMLRPC server. (#161096) * Fri Jun 17 2005 Akira TAGOH - 1.8.2-8- ruby-1.8.2-tcltk-multilib.patch: applied to get tcltklib.so built. (#160194) * Fri Apr 08 2005 Akira TAGOH - 1.8.2-7- ruby-1.8.2-deadcode.patch: removed the dead code from the source. (#146108)- make sure that all documentation files in ruby-docs are the world- readable. (#147279) * Tue Mar 22 2005 Akira TAGOH - 1.8.2-6- ruby-1.8.2-strscan-memset.patch: fixed an wrong usage of memset(3). * Tue Mar 15 2005 Akira TAGOH - 1.8.2-5- rebuilt * Tue Jan 25 2005 Akira TAGOH - 1.8.2-4- fixed the wrong generation of file manifest. (#146055)- spec file clean up. * Mon Jan 24 2005 Akira TAGOH - 1.8.2-3- separated out to rdoc package.- make the dependency of irb for rdoc. (#144708) * Wed Jan 12 2005 Tim Waugh - 1.8.2-2- Rebuilt for new readline. * Wed Jan 05 2005 Akira TAGOH - 1.8.2-1- New upstream release.- ruby-1.8.1-ia64-stack-limit.patch: removed - it\'s no longer needed.- ruby-1.8.1-cgi_session_perms.patch: likewise.- ruby-1.8.1-cgi-dos.patch: likewise.- generated Ruby interactive documentation - senarated package. it\'s now provided as ri package. (#141806) * Thu Nov 11 2004 Jeff Johnson 1.8.1-10- rebuild against db-4.3.21. * Wed Nov 10 2004 Akira TAGOH - 1.8.1-9- ruby-1.8.1-cgi-dos.patch: security fix [CAN-2004-0983]- ruby-1.8.1-cgi_session_perms.patch: security fix [CAN-2004-0755] * Sat Oct 30 2004 Akira TAGOH - 1.8.1-8- added openssl-devel and db4-devel into BuildRequires (#137479) * Thu Oct 07 2004 Akira TAGOH - 1.8.1-7- require emacs-common instead of emacs. * Thu Jun 24 2004 Akira TAGOH 1.8.1-4- updated the documentation. * Wed Jun 16 2004 Elliot Lee - rebuilt * Tue Mar 02 2004 Elliot Lee - rebuilt * Fri Feb 13 2004 Elliot Lee - rebuilt * Wed Feb 04 2004 Akira TAGOH 1.8.1-1- New upstream release.- don\'t use any optimization for ia64 to avoid the build failure.- ruby-1.8.1-ia64-stack-limit.patch: applied to fix SystemStackError when the optimization is disabled. * Sat Dec 13 2003 Jeff Johnson 1.8.0-3- rebuild against db-4.2.52. * Fri Sep 26 2003 Jeff Johnson 1.8.0-2- rebuild against db-4.2.42. * Wed Aug 06 2003 Akira TAGOH 1.8.0-1- New upstream release. * Fri Jul 25 2003 Akira TAGOH 1.6.8-9.1- rebuilt * Fri Jul 25 2003 Akira TAGOH 1.6.8-9- ruby-1.6.8-castnode.patch: handling the nodes with correct cast. use this patch now instead of ruby-1.6.8-fix-x86_64.patch. * Sat Jul 05 2003 Akira TAGOH 1.6.8-8- rebuilt * Sat Jul 05 2003 Akira TAGOH 1.6.8-7- fix the gcc warnings. (#82192)- ruby-1.6.8-fix-x86_64.patch: correct a patch. NOTE: DON\'T USE THIS PATCH FOR BIG ENDIAN ARCHITECTURE.- ruby-1.6.7-long2int.patch: removed. * Thu Jun 05 2003 Elliot Lee - rebuilt * Fri Feb 07 2003 Jens Petersen - 1.6.8-5- rebuild against ucs4 tcltk * Wed Jan 22 2003 Tim Powers - rebuilt * Wed Jan 22 2003 Akira TAGOH 1.6.8-3- ruby-1.6.8-multilib.patch: applied to fix the search path issue on x86_64 * Tue Jan 21 2003 Akira TAGOH 1.6.8-2- ruby-1.6.8-require.patch: applied to fix the search bug in require.- don\'t apply long2int patch to s390 and s390x. it doesn\'t work. * Wed Jan 15 2003 Akira TAGOH 1.6.8-1- New upstream release.- removed some patches. it\'s no longer needed. - ruby-1.6.7-100.patch - ruby-1.6.7-101.patch - ruby-1.6.7-102.patch - ruby-1.6.7-103.patch - 801_extmk.rb-shellwords.patch - 801_mkmf.rb-shellwords.patch - 804_parse.y-new-bison.patch - 805_uri-bugfix.patch - ruby-1.6.6-900_XXX_strtod.patch - ruby-1.6.7-sux0rs.patch - ruby-1.6.7-libobj.patch * Wed Jan 15 2003 Jens Petersen 1.6.7-14- rebuild to update tcltk deps * Mon Dec 16 2002 Elliot Lee 1.6.7-13- Remove ExcludeArch: x86_64- Fix x86_64 ruby with long2int.patch (ruby was assuming that sizeof(long) == sizeof(int). The patch does not fix the source of the problem, just makes it a non-issue.)- _smp_mflags * Tue Dec 10 2002 Tim Powers 1.6.7-12- rebuild to fix broken tcltk deps * Wed Oct 23 2002 Akira TAGOH 1.6.7-11- use %configure macro instead of configure script.- use the latest config.{sub,guess}.- get archname from rbconfig.rb for %dir- applied some patches from Debian: - 801_extmk.rb-shellwords.patch: use Shellwords - 801_mkmf.rb-shellwords.patch: mkmf.rb creates bad Makefile. the Makefile links libruby.a to the target. - 803_sample-fix-shbang.patch: all sample codes should be s|/usr/local/bin|/usr/bin|g - 804_parse.y-new-bison.patch: fix syntax warning. - 805_uri-bugfix.patch: uri.rb could not handle correctly broken mailto-uri.- add ExcludeArch x86_64 temporarily to fix Bug#74581. Right now ruby can\'t be built on x86_64. * Wed Aug 28 2002 Akira TAGOH 1.6.7-10- moved sitedir to /usr/lib/ruby/site_ruby again according as our perl and python.- ruby-1.6.7-resolv1.patch, ruby-1.6.7-resolv2.patch: applied to fix \'Too many open files - \"/etc/resolv.conf\"\' issue. (Bug#64830) * Fri Jul 19 2002 Akira TAGOH 1.6.7-9- add the owned directory. * Sat Jul 13 2002 Akira TAGOH 1.6.7-8- fix typo. * Fri Jul 05 2002 Akira TAGOH 1.6.7-7- removed the ruby-mode-xemacs because it\'s merged to the xemacs sumo. * Sat Jun 22 2002 Tim Powers - automated rebuild * Thu Jun 20 2002 Akira TAGOH 1.6.7-5- fix the stripped binary.- use the appropriate macros. * Mon May 27 2002 Tim Powers - automated rebuild * Fri May 24 2002 Akira TAGOH 1.6.7-3- ruby-1.6.7-libobj.patch: applied to fix autoconf2.53 error. * Mon Mar 18 2002 Akira TAGOH 1.6.7-2- ruby-man-1.4.6-jp.tar.bz2: removed.- ruby-refm-rdp-1.4.7-ja-html.tar.bz2: uses it instead of.- ruby-1.6.7-500-marshal-proc.patch, ruby-1.6.7-501-class-var.patch: removed.- ruby-1.6.7-100.patch: applied a bug fix patch. (ruby-dev#16274: patch for \'wm state\') (PR#206ja: SEGV handle EXIT) - ruby-1.6.7-101.patch: applied a bug fix patch. (ruby-list#34313: singleton should not be Marshal.dump\'ed) (ruby-dev#16411: block local var)- ruby-1.6.7-102.patch: applied a bug fix patch. (handling multibyte chars is partially broken)- ruby-1.6.7-103.patch: applied a bug fix patch. (ruby-dev#16462: preserve reference for GC, but link should be cut) * Fri Mar 08 2002 Akira TAGOH 1.6.7-1- New upstream release.- ruby-1.6.6-100.patch, ruby-1.6.6-501-ruby-mode.patch: removed. these patches no longer should be needed.- ruby-1.6.7-500-marshal-proc.patch: applied a fix patch. (ruby-dev#16178: Marshal::dump should call Proc#call.)- ruby-1.6.7-501-class-var.patch: applied a fix patch. (ruby-talk#35157: class vars broken in 1.6.7) * Wed Feb 27 2002 Akira TAGOH 1.6.6-5- Disable alpha because nothing is xemacs for alpha now. * Tue Feb 05 2002 Akira TAGOH 1.6.6-3- Fixed the duplicate files. * Tue Feb 05 2002 Akira TAGOH 1.6.6-2- Fixed the missing %defattr * Fri Feb 01 2002 Akira TAGOH 1.6.6-1- New upstream release.- Applied bug fix patches: - ruby-1.6.6-501-ruby-mode.patch: ruby-talk#30479: disables font-lock coloring. - ruby-1.6.6-100.patch: ruby-talk#30203: Ruby 1.6.6 bug and fix ruby-list#33047: regex bug PR#230: problem with -d in 1.6.6- Added ruby-mode and ruby-mode-xemacs packages.- Ruby works fine for ia64. so re-enable to build with ia64. (probably it should be worked for alpha) * Wed Jan 09 2002 Tim Powers - automated rebuild * Fri Jul 20 2001 Bernhard Rosenkraenzer 1.6.4-2- Remove Japanese description and summaries; they belong in specspo and break rpm- Clean up specfile- Mark language specific files (README.jp) as such- bzip2 sources- rename the libruby package to ruby-libs for consistency- Exclude ia64 (doesn\'t build - the code doesn\'t seem to be 64-bit clean [has been excluded on alpha forever]) * Wed Jul 18 2001 Akira TAGOH 1.6.4-1- rebuild for Red Hat 7.2 * Tue Jun 05 2001 akira yamada - upgrade to nwe upstream version 1.6.4. * Tue Apr 03 2001 akira yamada - applied patch: - fixed method cache bug. etc. (Patch103, Patch104) * Wed Mar 28 2001 akira yamada - applied patch: - fixed marshal for bignum bug. - fixed scope of constant variables bug. * Tue Mar 20 2001 akira yamada - upgraded to new upstream version 1.6.3. * Fri Feb 09 2001 akira yamada - fixed bad group for libruby.- Applied patch: upgraded to cvs version (2001-02-08): fixed minor bugs. * Thu Jan 18 2001 akira yamada - Applied patch: upgraded to cvs version (2001-01-15): fixed minor bugs(e.g. ruby makes extention librares too large...). * Wed Jan 10 2001 akira yamada - Applied patch: upgraded to cvs version (2001-01-09): fixed minor bugs. * Sat Dec 30 2000 akira yamada - Applied bug fix patch. * Mon Dec 25 2000 akira yamada - Updated to new upstream version 1.6.2. * Fri Dec 22 2000 akira yamada - Removed ruby_cvs.2000122019.patch, added ruby_cvs.2000122215.patch (upgraded ruby to latest cvs version, 1.6.2-preview4). * Wed Dec 20 2000 akira yamada - Removed ruby_cvs.2000121413.patch, added ruby_cvs.2000122019.patch (upgraded ruby to latest cvs version).- new package: libruby * Thu Dec 14 2000 akira yamada - Removed ruby_cvs.2000101901.patch, added ruby_cvs.2000121413.patch (upgraded ruby to latest cvs version).- Removed ruby-dev.11262.patch, ruby-dev.11265.patch, and ruby-dev.11268.patch (included into above patch). * Sun Nov 12 2000 MACHINO, Satoshi 1.6.1-0vl9- build on gcc-2.95.3 * Fri Oct 20 2000 akira yamada - Added ruby-dev.11268.patch. * Fri Oct 20 2000 akira yamada - Removed ruby_cvs.2000101117.patch and added ruby_cvs.2000101901.patch (upgraded ruby to latest cvs version).- Added ruby-dev.11262.patch.- Added ruby-dev.11265.patch. * Thu Oct 12 2000 akira yamada - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000101117.patch (upgraded ruby to latest cvs version). * Tue Oct 10 2000 akira yamada - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000100313.patch (upgraded ruby to latest cvs version). * Wed Oct 04 2000 akira yamada - Removed ruby_cvs.2000100218.patch and added ruby_cvs.2000100313.patch (upgraded ruby to latest cvs version). * Tue Oct 03 2000 akira yamada - Removed ruby_cvs.2000092718.patch and added ruby_cvs.2000100218.patch (upgraded ruby to latest cvs version). * Thu Sep 28 2000 akira yamada - Updated to upstream version 1.6.1.- Removed ruby_cvs.2000082901.patch and added ruby_cvs.2000092718.patch (upgraded ruby to latest cvs version). * Wed Aug 30 2000 akira yamada - Updated to version 1.4.6.- removed ruby-dev.10123.patch(included into ruby-1.4.6).- Added ruby_cvs.2000082901.patch(upgraded ruby to latest cvs version). * Wed Jun 28 2000 akira yamada - Updated manuals to version 1.4.5. * Mon Jun 26 2000 akira yamada - Added ruby-dev.10123.patch. * Sun Jun 25 2000 akira yamada - Updated to version 1.4.5.- Removed ruby_cvs.2000062401.patch(included into ruby-1.4.5). * Fri Jun 23 2000 akira yamada - Updated to version 1.4.4(06/22/2000 CVS).- Removed ruby-dev.10054.patch(included into ruby_cvs.patch). * Fri Jun 23 2000 akira yamada - Renamed to ruby_cvs20000620.patch from ruby_cvs.patch. * Wed Jun 21 2000 akira yamada - Updated to version 1.4.4(06/20/2000 CVS).- Removed ruby-list.23190.patch(included into ruby_cvs.patch).- Added ruby-dev.10054.patch. * Fri Jun 16 2000 akira yamada - Updated to version 1.4.4(06/12/2000 CVS).- Added manuals and FAQs.- Split into ruby, ruby-devel, ruby-tcltk, ruby-docs, irb. * Wed Jun 14 2000 Mitsuo Hamada - Updated to version 1.4.4 * Wed Dec 08 1999 Atsushi Yamagata - Updated to version 1.4.3 * Tue Sep 21 1999 Atsushi Yamagata - Updated to version 1.4.2 (Sep 18) * Sat Sep 18 1999 Atsushi Yamagata - Updated to version 1.4.2 * Wed Aug 18 1999 Atsushi Yamagata - Updated to version 1.4.0 * Sat Jul 24 1999 Atsushi Yamagata - 2nd release- Updated to version 1.2.6(15 Jul 1999)- striped %{prefix}/bin/ruby * Tue Jun 29 1999 Atsushi Yamagata - Updated to version 1.2.6(21 Jun 1999) * Thu Apr 15 1999 Atsushi Yamagata - Updated to version 1.2.5 * Sat Apr 10 1999 Atsushi Yamagata - Updated to version 1.2.4 * Fri Dec 25 1998 Toru Hoshina - Version up to 1.2 stable. * Fri Nov 27 1998 Toru Hoshina - Version up to 1.1c9. * Thu Nov 19 1998 Toru Hoshina - Version up to 1.1c8, however it appear short life :-P * Fri Nov 13 1998 Toru Hoshina - Version up. * Wed Sep 23 1998 Toru Hoshina - To make a libruby.so. * Tue Sep 22 1998 Toru Hoshina - Modified SPEC in order to install libruby.a so that it should be used by another ruby entention.- 2nd release. * Mon Mar 09 1998 Shoichi OZAWA - Added a powerPC arch part. Thanks, MURATA Nobuhiro
|
|
|