-
Mon Aug 22 2022 Jarek Prokop <jprokop@redhat.com> - 3.0.4-149
- Upgrade to Ruby 3.0.4.
Resolves: rhbz#2128628
- Fix user-installed rubygems plugins are not being loaded.
Resolves: rhbz#2128629
- Fix buffer overflow in CGI.escape_html.
Resolves: CVE-2021-41816
- Fix regular expression denial of service vulnerability of Date parsing
methods.
Resolves: CVE-2021-41817
- Fix cookie prefix spoofing in CGI::Cookie.parse.
Resolves: CVE-2021-41819
- Fix double free in Regexp compilation.
Resolves: CVE-2022-28738
- Fix buffer overrun in String-to-Float conversion.
Resolves: CVE-2022-28739
-
Wed Jul 28 2021 Jarek Prokop <jprokop@redhat.com> - 3.0.2-148
- Upgrade to Ruby 3.0.2.
- Fix command injection vulnerability in RDoc. (CVE-2021-31799)
Resolves: rhbz#1980842
- Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
(CVE-2021-31810)
Resolves: rhbz#1980824
- Fix StartTLS stripping vulnerability in Net::IMAP. (CVE-2021-32066)
Resolves: rhbz#1980834
- Fix dependencies of gems with explicit source installed from a
different source. (CVE-2020-36327)
Resolves: rhbz#1968498
- Re-enable SSL tests.
- Fix some failing Bundler tests with old Git.
-
Fri Apr 23 2021 Jun Aruga <jaruga@redhat.com> - 3.0.1-147
- Upgrade to Ruby 3.0.1.
Resolves: rhbz#1947933
Resolves: CVE-2021-28965
-
Thu Apr 01 2021 Jun Aruga <jaruga@redhat.com> - 3.0.0-146
- Add the requirement of the ruby-default-gems to the ruby.
Related: rhbz#1921719
-
Wed Mar 10 2021 Jun Aruga <jaruga@redhat.com> - 3.0.0-145
- Fix the ruby systemtap file path.
Resolves: rhbz#1932291
- Revert removing the rdoc symbolic files that are specific in SCL.
- Bundle RDoc into StdLib.
Resolves: rhbz#1921719
- Merge commits from Fedora rawhide branch.
Related: rhbz#1903661
-
Mon Jan 25 2021 Jun Aruga <jaruga@redhat.com> - 3.0.0-144
- Upgrade to Ruby 3.0.0.
Resolves: rhbz#1903661
- Skip the ssl tests for offline on Brew build environment.
- Remove the rdoc symbolic files that are specific in SCL.
-
Tue Apr 14 2020 Jun Aruga <jaruga@redhat.com> - 2.7.1-128
- Upgrade to Ruby 2.7.1.
Resolves: rhbz#1826872
- Call load builtin macro if it is defined, or call own load macro.
-
Thu Apr 02 2020 Jun Aruga <jaruga@redhat.com> 2.7.0-127
- Fix did_you_mean (LoadError) that happens when running `bundle install`.
Resolves: rhbz#1819245
-
Thu Mar 12 2020 Jun Aruga <jaruga@redhat.com> 2.7.0-126
- Provide StdLib links for Racc and install it by default.
-
Thu Jan 16 2020 Jun Aruga <jaruga@redhat.com> 2.7.0-125
- Upgrade to Ruby 2.7.0.