RPM Search

Changelog for ruby3.0-3.0.7-150400.1.3.x86_64.rpm :

* Tue Apr 23 2024 mrueckertAATTsuse.de- Update to 3.0.7 (boo#1221851 boo#1221852 boo#1223314) https://www.ruby-lang.org/en/news/2024/04/23/ruby-3-0-7-released/ https://www.ruby-lang.org/en/news/2024/04/23/arbitrary-memory-address-read-regexp-cve-2024-27282/ https://www.ruby-lang.org/en/news/2024/03/21/rce-rdoc-cve-2024-27281/ https://www.ruby-lang.org/en/news/2024/03/21/buffer-overread-cve-2024-27280/ https://github.com/ruby/ruby/releases/tag/v3_0_7
* Thu Mar 30 2023 mrueckertAATTsuse.de- update to 3.0.6 (boo#1209891 CVE-2023-28755 boo#1209967 CVE-2023-28756) https://www.ruby-lang.org/en/news/2023/03/30/redos-in-time-cve-2023-28756/ https://www.ruby-lang.org/en/news/2023/03/28/redos-in-uri-cve-2023-28755/ https://www.ruby-lang.org/en/news/2023/03/30/ruby-3-0-6-released/- drop ruby-3.1.3-remove-timezone-test.patch solved differently upstream
* Sun Dec 25 2022 mrueckertAATTsuse.de- BuildRequire hostname for the testsuite
* Sun Dec 25 2022 mrueckertAATTsuse.de- Backport ruby-3.1.3-remove-timezone-test.patch
* Sun Dec 25 2022 mrueckertAATTsuse.de- Merge testing fixes from 3.1 to 2.7 to fix the testsuite flavor
* Thu Nov 24 2022 mrueckertAATTsuse.de- update to 3.0.5 (boo#1205726 CVE-2021-33621) https://www.ruby-lang.org/en/news/2022/11/22/http-response-splitting-in-cgi-cve-2021-33621/ https://www.ruby-lang.org/en/news/2022/11/24/ruby-3-0-5-released/- new release requires gcc-c++
* Wed Apr 13 2022 mrueckertAATTsuse.de- use rb_soname instead of hard coding the ruby package name
* Wed Apr 13 2022 mrueckertAATTsuse.de- add buildignore for ruby and ruby-common so we do not pull gem2rpm for the testsuite
* Wed Apr 13 2022 mrueckertAATTsuse.de- update to 3.0.4 (boo#1198441 boo#1198440) https://www.ruby-lang.org/en/news/2022/04/12/ruby-3-0-4-released/ - CVE-2022-28738: Double free in Regexp compilation - CVE-2022-28739: Buffer overrun in String-to-Float conversion
* Tue Mar 29 2022 dmuellerAATTsuse.com- move tests into separate testsuite _multibuild:
* reduces buildrequires on main package (procps which is behind systemd:mini)
* reduces depth of distro rebuild chain- exclude more tests that require network- make test failures fatal, they pass now- light subset of spec-cleaner cleanups- prefer %%global over %%define, they get evaluated at parse time
* Sun Feb 06 2022 mrueckertAATTsuse.de- Build ruby with jemalloc for sle 15 up
* Thu Nov 25 2021 mrueckertAATTsuse.de- update to 3.0.3 (boo#1193081 boo#1193080 boo#1193035) https://www.ruby-lang.org/en/news/2021/11/24/ruby-3-0-3-released/ - CVE-2021-41817: Regular Expression Denial of Service Vulnerability of Date Parsing Methods - CVE-2021-41816: Buffer Overrun in CGI.escape_html - CVE-2021-41819: Cookie Prefix Spoofing in CGI::Cookie.parse
* Wed Nov 10 2021 mrueckertAATTsuse.de- provide the correct rubygems version
* Sat Nov 06 2021 kkaempfAATTsuse.com- update to 3.0.2 https://www.ruby-lang.org/en/news/2021/07/07/ruby-3-0-2-released/
* CVE-2021-31810: Trusting FTP PASV responses vulnerability in Net::FTP
* CVE-2021-32066: A StartTLS stripping vulnerability in Net::IMAP
* CVE-2021-31799: A command injection vulnerability in RDoc
* Tue Aug 24 2021 cooloAATTsuse.com- Do not create links for /etc/alternatives at all but rely on rpm\'s %ghosts being creating at runtime in %post This aligns ruby3.0 with ruby2.7 and ruby-common
* Thu Jul 08 2021 cooloAATTsuse.com- Fix links in /etc/alternatives not to point to itself
* Tue Apr 13 2021 mrueckertAATTsuse.de- update to ruby 3.0.1 (boo#1184644) https://www.ruby-lang.org/en/news/2021/04/05/ruby-3-0-1-released/ - CVE-2021-28965: XML round-trip vulnerability in REXML Complete list of changes at https://github.com/ruby/ruby/compare/v3_0_0...v3_0_1- drop https://github.com/rubygems/rubygems/pull/4317.patch included in update
* Mon Jan 25 2021 mrueckertAATTsuse.de- add https://github.com/rubygems/rubygems/pull/4317.patch make sure the gem plugins path does not contain the buildroot
* Fri Dec 25 2020 mrueckertAATTsuse.de- update to ruby 3.0.0 https://www.ruby-lang.org/en/news/2020/12/25/ruby-3-0-0-released/
* Fri Dec 25 2020 mrueckertAATTsuse.de- Update to ruby 3.0.0~rc1 https://www.ruby-lang.org/en/news/2020/12/20/ruby-3-0-0-rc1-released/
* Wed Dec 09 2020 mrueckertAATTsuse.de- Update to ruby 3.0.0~preview2 https://www.ruby-lang.org/en/news/2020/12/08/ruby-3-0-0-preview2-released/- 3972.patch
* Tue Oct 27 2020 mrueckertAATTsuse.de- fix typo in the ruby macros file
* Tue Oct 27 2020 mrueckertAATTsuse.de- no longer luse the url for the 3972.patch, as the code in the PR was rebased and no longer applies to the code in preview 1.
* Sun Oct 25 2020 mrueckertAATTsuse.de- fix the macros to actually use 3.0.0
* Mon Sep 28 2020 mrueckertAATTsuse.de- added https://patch-diff.githubusercontent.com/raw/rubygems/rubygems/pull/3972.patch to fix regression in rubygems buildroot support https://github.com/rubygems/rubygems/issues/3971
* Mon Sep 28 2020 mrueckertAATTsuse.de- Update to 3.0.0~preview1 https://www.ruby-lang.org/en/news/2020/09/25/ruby-3-0-0-preview1-released/
* Tue Apr 28 2020 mrueckertAATTsuse.de- make sure that update-alternative weight for the default distribution is always greater than our normal weight
* Tue Apr 28 2020 mrueckertAATTsuse.de- make the update-alternative weight based on the ruby version
* Tue Apr 14 2020 bwiedemannAATTsuse.com- Add ruby2.7-drop-build-date.patch (boo#1047218)
* Tue Apr 07 2020 mrueckertAATTsuse.de- Update to 2.7.1 (boo#1167244 boo#1168938) - CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON (Additional fix) - CVE-2020-10933: Heap exposure vulnerability in the socket library https://github.com/ruby/ruby/compare/v2_7_0...v2_7_1
* Tue Feb 18 2020 stefan.bruensAATTrwth-aachen.de- Apply fixes/changes from ruby2.6 package lost in ruby2.7 switch:
* Fix mangling of shebangs, do not replace shell invocations with ruby, correcly replace \"/usr/bin/env ruby\". (bnc#1156797)
* Cleanup spec file: + Drop support for obsolete distro versions + use license macro, remove defattr
* Use valgrind-client-headers instead of full valgrind-devel package where available, reducing build package footprint.
* Remove unused libX11-devel BuildRequires.
* Sat Dec 28 2019 mrueckertAATTsuse.de- update to final release of 2.7.0 http://www.ruby-lang.org/en/news/2019/12/25/ruby-2-7-0-released/- update the use-pie.patch to apply cleanly again
* Tue Jul 09 2019 mrueckertAATTsuse.de- fix running tests (boo#1140844) just passing the DISABLED_TESTS variable is wrong. probably a relict from calling the test scripts directly. use TESTOPTS now.
* Sun Jun 23 2019 mrueckertAATTsuse.de- add gmp to the buildrequires
* Sat Jun 22 2019 mrueckertAATTsuse.de- starting package with 2.7.0-preview1