linux/poky.git/meta/recipes-devtools/ruby, branch kirkstone-4.0.12

ruby: Fix CVE-2023-28755

2023-05-03T14:17:12+00:00

Backport patch [1] to fix CVE-2023-28755. [1] https://github.com/ruby/ruby/commit/8ce4ab146498879b65e22f1be951b25eebb79300 (From OE-Core rev: 605634cf1adef2d9cf6dc6fdf17aa4032385497f) Signed-off-by: Mingli Yu Signed-off-by: Steve Sakoman

ruby: CVE-2023-28756 ReDoS vulnerability in Time

2023-04-26T14:03:21+00:00

Upstream-Status: Backport from https://github.com/ruby/ruby/commit/957bb7cb81995f26c671afce0ee50a5c660e540e (From OE-Core rev: 0f8eb0505e19ccd27e1b91f27285a9fc87f2aa93) Signed-off-by: Hitendra Prajapati Signed-off-by: Steve Sakoman

ruby: update 3.1.2 -> 3.1.3

2023-01-06T17:33:23+00:00

(From OE-Core rev: 3e43f3925bce640999a25ceb855a77d8cd0afd26) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni (cherry picked from commit 402254a5f841520b132508c21465111d33b6eb1a) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ruby: merge .inc into .bb

2023-01-06T17:33:23+00:00

(From OE-Core rev: 22d6559bc30897a82f4519ac463f12f01fea18bc) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni (cherry picked from commit d88ff809b2e78ee49d5da42bb08ff5244e6101af) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ruby: drop capstone support

2022-09-16T16:53:22+00:00

Upstream dropped capstone support and this also causing us reproducibility issues. (From OE-Core rev: fe8e54576e97ef7c4845889f3e8bb53f524c0611) Signed-off-by: Alexandre Belloni (cherry picked from commit d2496a904a7099ef0de818180820ad7b40843a08) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ruby: add PACKAGECONFIG for capstone

2022-07-16T05:52:45+00:00

Autobuilder workers were non-deterministically enabling capstone depending on whether the worker had libcapstone installed. Add PACKAGECONFIG for capstone with default off, since ruby does not require capstone support. (From OE-Core rev: 6db1eb67e7abb5c1c655ab5d2b4eeb73ae4af576) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ruby: upgrade 3.1.1 -> 3.1.2

2022-04-28T16:07:18+00:00

Ruby 3.1.2 has been released. This release includes security fixes. CVE-2022-28738: Double free in Regexp compilation CVE-2022-28739: Buffer overrun in String-to-Float conversion (From OE-Core rev: ca1c990df62f1b3d53b2114a387f192efe7e38e8) Signed-off-by: Zheng Ruoqin Signed-off-by: Richard Purdie (cherry picked from commit 1306c732a39070e12306b0b7a393e2a482c8b326) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ruby: upgrade 3.1.0 -> 3.1.1

2022-02-25T12:41:23+00:00

refresh the following patches for 3.1.1: 0005-Mark-Gemspec-reproducible-change-fixing-784225-too.patch 0006-Make-gemspecs-reproducible.patch (From OE-Core rev: 6ae009ae73fc81de441d57699fee61b6fcc48600) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20T16:45:25+00:00

An automated conversion using scripts/contrib/convert-spdx-licenses.py to convert to use the standard SPDX license identifiers. Two recipes in meta-selftest were not converted as they're that way specifically for testing. A change in linux-firmware was also skipped and may need a more manual tweak. (From OE-Core rev: ceda3238cdbf1beb216ae9ddb242470d5dfc25e0) Signed-off-by: Richard Purdie

ruby: fix DEPENDS append

2022-02-16T09:46:29+00:00

recent change create a blank scope of DEPENDS for class-target, basically leaving out all general dependencies, leading to the effect that ruby will be shipped without the runtime dependencies of zlib, openssl and libffi, making the corresponding gems unusable at runtime. As the class-target scope should be appended only the correct override is append:class-target (From OE-Core rev: 8f92444d388d2406be7d317578908975784d3f22) Signed-off-by: Konrad Weihmann Signed-off-by: Richard Purdie