linux/poky.git/meta/recipes-devtools/ruby, branch yocto-4.0.14

ruby: fix CVE-2023-36617

2023-09-30T19:43:59+00:00

Backport two patches [1] [2] to fix CVE-2023-36617 (From OE-Core rev: 7a40082e4e080eaf5f88bd24f7169b7731028529) Signed-off-by: Meenali Gupta Signed-off-by: Steve Sakoman

ruby: Fix CVE-2023-28755

2023-05-03T14:17:12+00:00

Backport patch [1] to fix CVE-2023-28755. [1] https://github.com/ruby/ruby/commit/8ce4ab146498879b65e22f1be951b25eebb79300 (From OE-Core rev: 605634cf1adef2d9cf6dc6fdf17aa4032385497f) Signed-off-by: Mingli Yu Signed-off-by: Steve Sakoman

ruby: CVE-2023-28756 ReDoS vulnerability in Time

2023-04-26T14:03:21+00:00

Upstream-Status: Backport from https://github.com/ruby/ruby/commit/957bb7cb81995f26c671afce0ee50a5c660e540e (From OE-Core rev: 0f8eb0505e19ccd27e1b91f27285a9fc87f2aa93) Signed-off-by: Hitendra Prajapati Signed-off-by: Steve Sakoman

ruby: update 3.1.2 -> 3.1.3

2023-01-06T17:33:23+00:00

(From OE-Core rev: 3e43f3925bce640999a25ceb855a77d8cd0afd26) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni (cherry picked from commit 402254a5f841520b132508c21465111d33b6eb1a) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ruby: merge .inc into .bb

2023-01-06T17:33:23+00:00

(From OE-Core rev: 22d6559bc30897a82f4519ac463f12f01fea18bc) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni (cherry picked from commit d88ff809b2e78ee49d5da42bb08ff5244e6101af) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ruby: drop capstone support

2022-09-16T16:53:22+00:00

Upstream dropped capstone support and this also causing us reproducibility issues. (From OE-Core rev: fe8e54576e97ef7c4845889f3e8bb53f524c0611) Signed-off-by: Alexandre Belloni (cherry picked from commit d2496a904a7099ef0de818180820ad7b40843a08) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ruby: add PACKAGECONFIG for capstone

2022-07-16T05:52:45+00:00

Autobuilder workers were non-deterministically enabling capstone depending on whether the worker had libcapstone installed. Add PACKAGECONFIG for capstone with default off, since ruby does not require capstone support. (From OE-Core rev: 6db1eb67e7abb5c1c655ab5d2b4eeb73ae4af576) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ruby: upgrade 3.1.1 -> 3.1.2

2022-04-28T16:07:18+00:00

Ruby 3.1.2 has been released. This release includes security fixes. CVE-2022-28738: Double free in Regexp compilation CVE-2022-28739: Buffer overrun in String-to-Float conversion (From OE-Core rev: ca1c990df62f1b3d53b2114a387f192efe7e38e8) Signed-off-by: Zheng Ruoqin Signed-off-by: Richard Purdie (cherry picked from commit 1306c732a39070e12306b0b7a393e2a482c8b326) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ruby: upgrade 3.1.0 -> 3.1.1

2022-02-25T12:41:23+00:00

refresh the following patches for 3.1.1: 0005-Mark-Gemspec-reproducible-change-fixing-784225-too.patch 0006-Make-gemspecs-reproducible.patch (From OE-Core rev: 6ae009ae73fc81de441d57699fee61b6fcc48600) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20T16:45:25+00:00

An automated conversion using scripts/contrib/convert-spdx-licenses.py to convert to use the standard SPDX license identifiers. Two recipes in meta-selftest were not converted as they're that way specifically for testing. A change in linux-firmware was also skipped and may need a more manual tweak. (From OE-Core rev: ceda3238cdbf1beb216ae9ddb242470d5dfc25e0) Signed-off-by: Richard Purdie