-
Tue Aug 11 2015 Vít Ondruch <vondruch@redhat.com> - 2.0.0.645-25
- Update to Ruby 2.0.0-p645.
* Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
with-DESTDIR.patch; subsumed
* Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
default-.gems.patch; subsumed
* Remove Patch23: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
subsumed
* Remove Patch29: ruby-2.0.0-p594-CVE-2014-8080-REXML-billion-laughs-
attack.patch; subsumed
* Remove Patch30: ruby-2.0.0-p598-CVE-2014-8090-REXML-incomplete-fix-for-
CVE-2014-8080.patch; subsumed
Resolves: rhbz#1070594
-
Fri Nov 14 2014 Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-24
- Fix off-by-one stack-based buffer overflow in the encodes() function
(CVE-2014-4975).
Related: rhbz#1164005
- Fix REXML billion laughs attack via parameter entity expansion
(CVE-2014-8080).
Related: rhbz#1164005
- REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
Related: rhbz#1164005
-
Fri Feb 28 2014 Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-23
- Explicitly depend on libyaml, to workaround issues with scl prefixed libyam.
Resolves: rhbz#1071347
-
Mon Feb 24 2014 Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-22
- Fix RubyGems test suite.
Resolves: rhbz#1069184
- Do not use bundled libyaml.
Resolves: rhbz#1069107
-
Tue Feb 11 2014 Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-21
- ruby-libs have to require scl_runtime.
Resolves: rhbz#1054758
-
Mon Feb 10 2014 Josef Stribny <jstribny@redhat.com> - 2.0.0.353-20
- Don't link cert.pem explicitely
- Resolves: rhbz#1057069
-
Fri Jan 10 2014 Josef Stribny <jstribny@redhat.com> - 2.0.0.353-19
- Fix tk extconf not to include -rpath
- Resolves: rhbz#1051011
-
Mon Jan 06 2014 Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-18
- Fix FTBFS due to expired certificate for IMAP test case.
- Resolves: rhbz#1048923
-
Mon Dec 16 2013 Josef Stribny <jstribny@redhat.com> - 2.0.0.353-17
- Remove rdoc obsoletes
- Resolves: rhbz#1043039
-
Mon Dec 02 2013 Josef Stribny <jstribny@redhat.com> - 2.0.0.353-16
- Update to Ruby 2.0.0-p353
- Fixes heap overflow in floating point parsing (CVE-2013-4164)
- Resolves: rhbz#1033906