linux/poky.git/meta/recipes-devtools/ruby, branch yocto-4.0.24

ruby: Make docs generation deterministic

2024-09-16T13:09:56+00:00

The presence or lack of nroff on the host was changing the doc type. Set it explicitly to be deterministic and reproducible. (From OE-Core rev: dd857d2519fd4f38c67a6fa0087f72798166467a) Signed-off-by: Richard Purdie (cherry picked from commit f5053abb8957acf358b518ee3c76146dc5f4eb6c) Signed-off-by: Steve Sakoman

ruby: backport fix for CVE-2024-27282

2024-07-24T14:51:58+00:00

Upstream-Status: Backport [https://github.com/ruby/ruby/commit/989a2355808a63fc45367785c82ffd46d18c900a] (From OE-Core rev: 94a0350058e51c4b05bf5d4e02d048c2e6256725) Signed-off-by: Ashish Sharma Signed-off-by: Steve Sakoman

ruby: fix CVE-2024-27280

2024-06-26T12:04:39+00:00

A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte and ungetc methods on a StringIO can read past the end of a string, and a subsequent call to StringIO.gets may return the memory value. 3.0.3 is the main fixed version; however, for Ruby 3.0 users, a fixed version is stringio 3.0.1.1, and for Ruby 3.1 users, a fixed version is stringio 3.0.1.2. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-27280 (From OE-Core rev: 729310d17310dff955c51811ff3339fdbc017b95) Signed-off-by: Yogita Urade Signed-off-by: Steve Sakoman

ruby: fix CVE-2024-27281

2024-04-21T13:33:34+00:00

ruby: RCE vulnerability with .rdoc_options in RDoc References: https://github.com/ruby/ruby/pull/10316 https://security-tracker.debian.org/tracker/CVE-2024-27281 (From OE-Core rev: d01b73c51ceead4911a9a9306dbe728f1db2e029) Signed-off-by: Yogita Urade Signed-off-by: Steve Sakoman

ruby: fix CVE-2023-36617

2023-09-30T19:43:59+00:00

Backport two patches [1] [2] to fix CVE-2023-36617 (From OE-Core rev: 7a40082e4e080eaf5f88bd24f7169b7731028529) Signed-off-by: Meenali Gupta Signed-off-by: Steve Sakoman

ruby: Fix CVE-2023-28755

2023-05-03T14:17:12+00:00

Backport patch [1] to fix CVE-2023-28755. [1] https://github.com/ruby/ruby/commit/8ce4ab146498879b65e22f1be951b25eebb79300 (From OE-Core rev: 605634cf1adef2d9cf6dc6fdf17aa4032385497f) Signed-off-by: Mingli Yu Signed-off-by: Steve Sakoman

ruby: CVE-2023-28756 ReDoS vulnerability in Time

2023-04-26T14:03:21+00:00

Upstream-Status: Backport from https://github.com/ruby/ruby/commit/957bb7cb81995f26c671afce0ee50a5c660e540e (From OE-Core rev: 0f8eb0505e19ccd27e1b91f27285a9fc87f2aa93) Signed-off-by: Hitendra Prajapati Signed-off-by: Steve Sakoman

ruby: update 3.1.2 -> 3.1.3

2023-01-06T17:33:23+00:00

(From OE-Core rev: 3e43f3925bce640999a25ceb855a77d8cd0afd26) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni (cherry picked from commit 402254a5f841520b132508c21465111d33b6eb1a) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ruby: merge .inc into .bb

2023-01-06T17:33:23+00:00

(From OE-Core rev: 22d6559bc30897a82f4519ac463f12f01fea18bc) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni (cherry picked from commit d88ff809b2e78ee49d5da42bb08ff5244e6101af) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ruby: drop capstone support

2022-09-16T16:53:22+00:00

Upstream dropped capstone support and this also causing us reproducibility issues. (From OE-Core rev: fe8e54576e97ef7c4845889f3e8bb53f524c0611) Signed-off-by: Alexandre Belloni (cherry picked from commit d2496a904a7099ef0de818180820ad7b40843a08) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie