Changelog for ruby2.7-doc-ri-2.7.8-14.25.noarch.rpm :

* Tue Nov 07 2023 Dominique Leuenberger - Fix build with RPM 4.19: unnumbered patches are no longer supported.
* Sat Nov 04 2023 Marcus Rueckert - add Provides that we can differentiate between between jemalloc enabled and non enabled ruby
* Thu Mar 30 2023 Marcus Rueckert - update to 2.7.8 (boo#1209891 CVE-2023-28755 boo#1209967 CVE-2023-28756) https://www.ruby-lang.org/en/news/2023/03/30/redos-in-time-cve-2023-28756/ https://www.ruby-lang.org/en/news/2023/03/28/redos-in-uri-cve-2023-28755/ https://www.ruby-lang.org/en/news/2023/03/30/ruby-2-7-8-released/- drop ruby-3.1.3-remove-timezone-test.patch solved differently upstream
* Sun Dec 25 2022 Marcus Rueckert - BuildRequire hostname for the testsuite
* Sun Dec 25 2022 Marcus Rueckert - Backport ruby-3.1.3-remove-timezone-test.patch
* Sun Dec 25 2022 Marcus Rueckert - Merge testing fixes from 3.1 to 2.7 to fix the testsuite flavor
* Thu Nov 24 2022 Marcus Rueckert - update to 2.7.7 (boo#1205726 CVE-2021-33621) https://www.ruby-lang.org/en/news/2022/11/22/http-response-splitting-in-cgi-cve-2021-33621/ https://www.ruby-lang.org/en/news/2022/11/24/ruby-2-7-7-released/
* Wed Apr 13 2022 Marcus Rueckert - use rb_soname instead of hard coding the ruby package name
* Wed Apr 13 2022 Marcus Rueckert - add buildignore for ruby and ruby-common so we do not pull gem2rpm for the testsuite
* Wed Apr 13 2022 Marcus Rueckert - update to 2.7.6 (boo#1198441) https://www.ruby-lang.org/en/news/2022/04/12/ruby-2-7-6-released/ CVE-2022-28739: Buffer overrun in String-to-Float conversion
* Sun Feb 06 2022 Marcus Rueckert - Build ruby with jemalloc for sle 15 up
* Mon Dec 06 2021 Dirk Müller - explicitly build against openssl 1.x (not compatible with 3.x)
* Thu Nov 25 2021 Marcus Rueckert - update to 2.7.5 (boo#1193081 boo#1193080 boo#1193035) https://www.ruby-lang.org/en/news/2021/11/24/ruby-2-7-5-released/ - CVE-2021-41817: Regular Expression Denial of Service Vulnerability of Date Parsing Methods - CVE-2021-41816: Buffer Overrun in CGI.escape_html - CVE-2021-41819: Cookie Prefix Spoofing in CGI::Cookie.parse
* Wed Nov 10 2021 Marcus Rueckert - Update to 2.7.4 https://www.ruby-lang.org/en/news/2021/07/07/ruby-2-7-4-released/
* CVE-2021-31810: Trusting FTP PASV responses vulnerability in Net::FTP
* CVE-2021-32066: A StartTLS stripping vulnerability in Net::IMAP
* CVE-2021-31799: A command injection vulnerability in RDoc
* Mon Aug 30 2021 Marcus Rueckert - use modern make_
* macros
* Fri Jul 09 2021 Stephan Kulow - Expand the %ghost globs - otherwise they are not packaged correctly
* Thu Jul 08 2021 Stephan Kulow - Remove links in /etc/alternatives, they are %ghosts
* Tue Apr 13 2021 Marcus Rueckert - Update to 2.7.3 (boo#1184644) https://www.ruby-lang.org/en/news/2021/04/05/ruby-2-7-3-released/ - CVE-2021-28965: XML round-trip vulnerability in REXML Complete list of changes at https://github.com/ruby/ruby/compare/v2_7_2...v2_7_3