-
Fri Nov 14 2014 Vít Ondruch <vondruch@redhat.com> - 2.0.0.598-24
- Rebased to Ruby 2.0.0-p598.
* Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
default-.gems.patch; subsumed
* Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
subsumed
* Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
-succ.patch; subsumed
* Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
(CVE-2014-4975).
Related: rhbz#1164000
-
Wed Sep 24 2014 Josef Stribny <jstribny@redhat.com> - 2.0.0.353-23
- Add missing patch for new tzdata
Related: rhbz#1144023
- Add missing patch for RFC 5649 in OpenSSL
Related: rhbz#1145692
-
Tue Sep 23 2014 Josef Stribny <jstribny@redhat.com> - 2.0.0.353-22
- Fix FTBFS with new tzdata
Resolves: rhbz#1144023
- Fix FTBFS due to a support for RFC 5649 in OpenSSL
Resolves: rhbz#1145692
-
Thu Aug 14 2014 Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-21
- Add support for ppc64le arch.
Resolves: rhbz#1126146
-
Fri Jan 24 2014 Daniel Mach <dmach@redhat.com> - 2.0.0.353-20
- Mass rebuild 2014-01-24
-
Tue Jan 07 2014 Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-19
- Update to Ruby 2.0.0-p353.
- Resolves: rhbz#1033923
- Allow MD5 in OpenSSL for tests.
-
Fri Jan 03 2014 Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-18
- Fix FTBFS due to expired certificate for IMAP test case.
- Fix test_aes_gcm_wrong_tag random failures.
- Resolves: rhbz#1048899
-
Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 2.0.0.247-18
- Mass rebuild 2013-12-27
-
Mon Nov 25 2013 Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-17
- Heap overflow in floating point parsing (CVE-2013-4164).
* ruby-2.0.0-p353-CVE-2013-4164-ignore-too-long-fraction-part.patch
- Resolves: rhbz#1033503
- Allow MD5 in OpenSSL tests.
-
Wed Sep 25 2013 Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-16
- Fix version regex algorithmic complexity vulnerability (CVE for incomplete
fix for CVE-2013-4287) (CVE-2013-4363).
- Related: rhbz#1006429