Commit graph

27 commits

Author SHA1 Message Date
taca
ccd96b6fdd Fix wrong parameter from [ruby-list:49643] in ruby-tk package.
Bump PKGREVISION.
2013-11-24 15:26:30 +00:00
taca
1337e39064 Update ruby193-base (and related packages to 1.9.3-p484).
Ruby 1.9.3-p484 is released

Now Ruby 1.9.3-p484 is released.

This release includes a security fix about ruby interpreter core:

    Heap Overflow in Floating Point Parsing (CVE-2013-4164)

And some bugfixes are also included. See tickets and ChangeLog for details.
2013-11-24 14:17:19 +00:00
joerg
5de495a101 Don't pessimize the compilation by forcing per-function call pushs. 2013-10-25 21:47:20 +00:00
taca
2e5feba0ab Update a patch for CVE-2013-4363 (previous CVE-2013-4287).
Bump PKGREVISION.
2013-09-30 03:15:03 +00:00
taca
7faf95e1ed Add a fix for CVE-2013-4287 in rubygems.
Bump PKGREVISION.
2013-09-10 16:25:51 +00:00
taca
059734ee4c Build fix for x11/ruby-tk package. Reported by PR pkg/48064. 2013-07-19 15:32:58 +00:00
taca
48f193de5c Add partly support build_info to bundled rubygems to make compatibilty with
rubygems 2.0.3.

Bump PKGREVISION.
2013-07-07 15:01:01 +00:00
taca
eba6f2522e Update ruby193-base to 1.9.3p448 (Ruby 1.9.3-p448).
Now Ruby 1.9.3-p448 is released.
This release includes a security fix about bundled OpenSSL:

* Hostname check bypassing vulnerability in SSL client (CVE-2013-4073)
  http://www.ruby-lang.org/en/news/2013/06/27/hostname-check-bypassing-vulnerability-in-openssl-client-cve-2013-4073/

And some bugfixes are also included.

Please refer ChangeLog for full changes.
2013-06-27 16:35:43 +00:00
taca
8c8319f2a6 Correct patch of configure scripts for DragonFly/FreeBSD.
That place was changed prior to my update of ruby193-base pacakge and
I'm not sure it was correct or not.

And suffix of libruby shared library has something historical part of
pkgsrc.  I don't care so much to changing the name, but also don't
think it is so important thing to bump revisions.

Noted by pkg/47831 from David Shao.
2013-05-18 07:39:36 +00:00
taca
5ad3680335 Update ruby193 and related packages to 1.9.3p429 (Ruby 1.9.3 patchlevel 429).
pkgsrc changes:

  * Fix gem command creating extra directories.

Quote from release announce:

  This release includes a security fix about bundled DL / Fiddle.

  * Object taint bypassing in DL and Fiddle in Ruby (CVE-2013-2065)

	http://www.ruby-lang.org/en/news/2013/05/14/taint-bypass-dl-fiddle-cve-2013-2065/

  * And some small bugfixes are also included.

    See tickets:

	https://bugs.ruby-lang.org/projects/ruby-193/issues?set_filter=1&status_id=5
    ChangeLog for details.

	http://svn.ruby-lang.org/repos/ruby/tags/v1_9_3_426/ChangeLog
2013-05-16 16:13:59 +00:00
bsiegert
dbde881868 Unbreak build on MirBSD by pre-including sys/types.h and sys/time.h in
header checks.
This will be submitted upstream.
2013-04-30 21:30:59 +00:00
taca
611bb9174c Update ruby193-base package (and related) to 1.9.3-p392.
Security problem of CVE-2013-0269 was already handled but REXML security
problem is fixed by this package.


Now Ruby 1.9.3-p392 is released. I apologize for updating too frequently.

This release includes security fixes about bundled JSON and REXML.

* Denial of Service and Unsafe Object Creation Vulnerability in JSON
  (CVE-2013-0269)
* Entity expansion DoS vulnerability in REXML (XML bomb)

And some small bugfixes are also included.
2013-02-22 16:20:47 +00:00
taca
2a2553c633 * Add fix for CVE-2013-0269, json vulnerability.
* Add comments to patches related to mdoc markup.

Bump PKGREVISION.
2013-02-12 13:03:08 +00:00
taca
2323e4e1d1 Update ruby193 pacakges to 1.9.3p385.
This release includes a security fix about bundled RDoc.
Full changes are too may to write here, please refer ChangeLog.
2013-02-06 15:48:30 +00:00
taca
86f0df3038 Add a two fixes from ruby-2.0.0/rubygems 1.8.25.
* Allow multiple conditions for requirement of gem's specification since
  some newer gem already use this feature.
2013-02-02 08:11:53 +00:00
taca
40e82ee301 Update ruby193 to 1.9.3p374 (Ruby 1.9.3-p374).
These releasess don't include any security fixes.


Ruby 1.9.3-p362:

This release includes other many bug fixes.

    Resolved build problems on Solaris.
    Windows 8 support (hopefully).
    other many bug fixes.

Ruby 1.9.3-p374:

This release includes many bug fixes. Especially,

    Fixed randomly SEGV problem (often reported with Rails)
    Windows 8 support (maybe, hopefully)
    other many bug fixes.

See tickets and ChangeLog for details.
2013-01-31 15:56:13 +00:00
fhajny
8b43938fcb Fix build on SunOS as per
http://bugs.ruby-lang.org/projects/ruby-193/repository/revisions/37653
2012-11-26 12:37:52 +00:00
taca
99ac9e23e5 Update ruby193-base to 1.9.3p286.
Ruby 1.9.3-p286 is released.

This release includes some security fixes, and other many bug fixes.

* $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
  (CVE-2012-4464, CVE-2012-4466)
* Unintentional file creation caused by inserting a illegal NUL character
* other many bug fixes.

See ticktes and ChangeLog for details.

Changelog: http://svn.ruby-lang.org/repos/ruby/tags/v1_9_3_286/ChangeLog
tickets: https://bugs.ruby-lang.org/projects/ruby-193/issues?set_filter=1&status_id=5
2012-10-12 14:51:31 +00:00
taca
139cbc36aa Add short note to patches/patch-error.c about CVE-2012-4464 and CVE-2012-4466. 2012-10-06 16:27:53 +00:00
taca
858b43746c Add a patch to fix CVE-2011-1005 security problem which found out that
it affected Ruby 1.9.x, too.

Now it assigned CVE-2012-4464 and CVE-2012-4466.

Bump PKGREVISION.
2012-10-06 16:20:35 +00:00
bsiegert
a0846b2089 MirBSD support.
This adds shlib version handling to rubyversion.mk, a fix to configure
(include <sys/time.h> when checking for struct timespec) and a workaround
for broken code if getgrnam_r is available.
2012-07-25 14:26:57 +00:00
taca
6e6a394ae1 * Don't use --enable-wide-getaddrinfo on SunOS.
* Add a patch from Ruby's repository, r35698; make sure to keep space
  between "-o" and output filename.

Bump PKGREVISION.
2012-06-02 02:23:33 +00:00
taca
502a123149 Update ruby193 packages to 1.9.3p194.
Security fix with updating bundled RubyGems to 1.8.23 and several bug fixes.
Please refer ChangeLog in detail:
http://svn.ruby-lang.org/repos/ruby/tags/v1_9_3_194/ChangeLog
2012-04-22 08:17:16 +00:00
taca
65139fd88b * Add a patch whihc I forgot to commit at previous commit.
This patch should be verified on none-BSD platform.
* Distribution file of Ruby 1.9.3 patchlevel 125 was update with the
  same file name.

	Packages are repacked to fix [Bug #6040].
	See http://www.ruby-lang.org/en/news/2012/02/16/ruby-1-9-3-p125-is-released/

  These files are changed:
	enc/trans/big5.c
	insns_info.inc
2012-02-18 05:03:34 +00:00
joerg
97c78be84e Fix mdoc markup. Bump revision. 2012-01-24 20:41:51 +00:00
taca
d244ed1d1f * Add ${RUBY_VER} under ${GEM_HOME}/gems/*/bin comamnds to avoid
conflict with outside gem.
* Fix shared library's name on FreeBSD (tested with 8.2-STABLE).

Bump PKGREVISION.
2011-12-04 02:31:54 +00:00
taca
2e1860a66f Importing ruby193-base version 1.9.3p0 (Ruby 1.9.3 p0):
Please refer detail for:
	http://svn.ruby-lang.org/repos/ruby/tags/v1_9_3_0/NEWS
	http://svn.ruby-lang.org/repos/ruby/tags/v1_9_3_0/ChangeLog

Short summary from NEWS:

* Ruby's License is changed from a dual license with GPLv2
  to a dual license with 2-clause BSDL.

* Encoding
  * new encodings: CP950, CP951, UTF-16 and UTF-32
  * change alias:
    * SJIS is Windows-31J

* Regexps now support Unicode 6.0. (new characters and scripts)

* builtin classes

  * ARGF
    * new methods: ARGF.read_nonblock and so on.
  * Array
    * extended method: Array#pack supports endian modifiers
  * String
    * extended method: String#unpack supports endian modifiers
    * new method: String#prepend and String#byteslice
  * Bignum
    * Multiplication algorithm for Bignums with a large number of digits over
      150 BDIGITs is changed in order to reduce its calculation time.
      Now such large Bignums are multiplied by using Toom-3 algorithm.
  * File
    * new constant: File::NULL and File::DIRECT
  * IO
    * extended method: IO#putc supports multibyte characters
    * new methods: * IO#advise, IO.write and IO.binwrite
  * Kernel
    * move #__id__ to BasicObject
    * extended method: Kernel#rand supports range argument
  * Module
    * new methods: Module#private_constant and Module#public_constant
  * Random
    * extended method: Random.rand supports range argument
  * Time
    * extended method: Time#strftime supports %:z and %::z
  * Process
    * Process#maxgroups and Process#maxgroups= now raise NotImplementedError if
      the platform don't support supplementary groups concept
2011-11-08 16:10:51 +00:00