linux/poky.git/meta/recipes-devtools/ruby, branch yocto-3.1.13

ruby: 2.7.3 -> 2.7.4

2021-08-18T17:00:19+00:00

This release includes security fixes. CVE-2021-31810: Trusting FTP PASV responses vulnerability in Net::FTP CVE-2021-32066: A StartTLS stripping vulnerability in Net::IMAP CVE-2021-31799: A command injection vulnerability in RDoc https://www.ruby-lang.org/en/news/2021/07/07/ruby-2-7-4-released/ (From OE-Core rev: 9b1a0d63186a64d78de379494fe256087f62770a) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ruby: 2.7.1 -> 2.7.3

2021-06-19T15:59:29+00:00

This release includes security fixes. CVE-2021-28965: XML round-trip vulnerability in REXML CVE-2021-28966: Path traversal in Tempfile on Windows CVE-2020-25613 fixed in 2.7.2, do drop the patch release notes for 2.7.2 and 2.7.3 https://www.ruby-lang.org/en/news/2020/10/02/ruby-2-7-2-released/ https://www.ruby-lang.org/en/news/2021/04/05/ruby-2-7-3-released/ (From OE-Core rev: 4de0d54827bc4645b69e5a0043b6f285b0193402) Signed-off-by: Lee Chee Yang Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ruby: remove tcl DEPENDS

2021-01-13T08:57:57+00:00

The integrated Tcl/Tk module was removed in Ruby 2.4[1] back in 2016, so this build dependency can be removed. [1] https://github.com/ruby/ruby/commit/303dc3c591e324b6bbc691326d8bea76fe3b8fda (From OE-Core rev: 832e9e6bac91755f6a6a8ab9af0e48c189d3e493) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 9f4e181924a83d7b26b11de765c202a9bd036f64) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ruby: fix reproducibility

2020-12-18T14:20:19+00:00

(From OE-Core rev: d2619ca71a777ae4fd0ecb4340848ef98282a9ad) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie (cherry picked from commit 07c26e3292dbaf71873f71bec2a631f880b2e76d) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ruby: fix CVE-2020-25613

2020-11-12T13:07:52+00:00

(From OE-Core rev: 80077479fd687a887cd321fe2e65dfd58edb5832) Signed-off-by: Chee Yang Lee Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ruby: upgrade 2.7.0 -> 2.7.1

2020-08-12T09:53:46+00:00

This release includes security fixes: CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON (Additional fix) CVE-2020-10933: Heap exposure vulnerability in the socket library (From OE-Core rev: 51b45ec3fcdc3c338f8a141110abf8aa5d374e5e) Signed-off-by: Zheng Ruoqin Signed-off-by: Richard Purdie (cherry picked from commit 8d9b48bdf25363fb115a6311b031a7e5da8e0d4d) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ruby: Link with libucontext on musl

2020-05-05T07:45:30+00:00

coroutines in ruby 2.7+ needs ucontext APIs which are not available in musl but an external library is available to provide them so use it Use cached values for ac_cv_func_isnan and ac_cv_func_isinf this is not detected correctly by configure on musl on ARM drop using old arm32 implementation of coroutine which is slow and inefficient (From OE-Core rev: a2b1af47316a9f5c522db0c9feff1fbe0d39e022) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ruby: Use arm32 for coroutines on 32bit-arm

2020-03-11T11:44:28+00:00

in 2.7 [2] ruby enabled ucontext for coroutines on arm32 but it does not work for musl since it uses glibc specific functions e.g. getcontext/swapcontext/swapcontext also see [1] This patch reverts back to using arm32 implementation for coroutines on arm [1] https://bugs.ruby-lang.org/issues/16455#change-83442 [2] https://github.com/ruby/ruby/commit/6c6bf9ffcbfeb8be9d9c342e7604b74ec819e88a#diff-7fccec8474e2184cd2518046bf39d54cL10 (From OE-Core rev: ea93afa4c1c40d74faf321baa78a29d0ad7d3223) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

ruby: install required files for ptest

2020-02-28T23:11:28+00:00

After update to 2.7.0, it fails to start ptest of ruby with errors: | ./test/runner.rb:11:in `require_relative': cannot load such file -- /usr/lib64/ruby/ptest/tool/test/runner (LoadError) and | test/rdoc/test_rdoc_attr.rb: cannot load such file -- rdoc/version | test/did_you_mean/spell_checking/test_key_name_check.rb: cannot load such file -- /usr/lib64/ruby/ptest/lib/did_you_mean Install the required files for the ptest. (From OE-Core rev: be161be40c88fbac8ac17776daf3bf178a2e8f5e) Signed-off-by: Kai Kang Signed-off-by: Richard Purdie

ruby: upgrade 2.6.5 -> 2.7.0

2020-02-15T10:26:42+00:00

0003-configure.ac-check-finite-isinf-isnan-as-macros-firs.patch Removed since it is included in 2.7.0. refresh the following patch: 0002-Obey-LDFLAGS-for-the-link-of-libruby.patch add the following patch to solve build error: 0001-Modify-shebang-of-libexec-y2racc-and-libexec-racc2y.patch [error message] ERROR: ruby-2.7.0-r0 do_package_qa: QA Issue: /usr/lib/ruby/gems/2.7.0/gems/racc-1.4.16/bin/y2racc contained in package ruby requires /usr/local/bin/ruby, but no providers found in RDEPENDS_ruby? [file-rdeps] format of file COPYING is updated. LEGAL notice information is updated. (From OE-Core rev: 3cdf5da514b424a6d78ba4e1412331b6cf2b3bff) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie