linux/poky.git/meta/recipes-devtools/ruby, branch yocto-5.0.8

ruby: upgrade 3.2.2 -> 3.3.5

2024-10-18T13:04:40+00:00

Includes fix for CVE-2024-41123 & CVE-2024-41946 Release notes: https://github.com/ruby/ruby/releases/tag/v3_3_5 Rebase: 0005-Mark-Gemspec-reproducible-change-fixing-784225-too.patch 0006-Make-gemspecs-reproducible.patch Drop: 0001-fiddle-Use-C11-_Alignof-to-define-ALIGN_OF-when-poss.patch 0002-Obey-LDFLAGS-for-the-link-of-libruby.patch CVE-2023-36617_1.patch CVE-2023-36617_2.patch CVE-2024-27281.patch CVE-2024-27282.patch (merged upstream) 0001-template-Makefile.in-do-not-write-host-cross-cc-item.patch 0002-template-Makefile.in-filter-out-f-prefix-map.patch remove_has_include_macros.patch (code rewritten upstream) License-Update: Updated LEGAL section (From OE-Core rev: 69ffe5bc09260918fb32bfcb29586dcaa1958a5c) Signed-off-by: Yogita Urade Signed-off-by: Steve Sakoman

ruby: Make docs generation deterministic

2024-09-19T12:11:35+00:00

The presence or lack of nroff on the host was changing the doc type. Set it explicitly to be deterministic and reproducible. (From OE-Core rev: 9ed723d1972b4e1bd1ae799661194ccbd4c6c759) Signed-off-by: Richard Purdie (cherry picked from commit f5053abb8957acf358b518ee3c76146dc5f4eb6c) Signed-off-by: Steve Sakoman

ruby: Backport fix for CVE-2024-27282

2024-08-26T12:18:43+00:00

Upstream-Status: Backport [https://github.com/ruby/ruby/commit/989a2355808a63fc45367785c82ffd46d18c900a] (From OE-Core rev: 1103182ac9ae5139a5c3d7381007f61c1f7d91a6) Signed-off-by: Ashish Sharma Signed-off-by: Steve Sakoman

ruby: fix CVE-2024-27281

2024-07-17T12:36:13+00:00

References: https://github.com/ruby/ruby/pull/10316 https://security-tracker.debian.org/tracker/CVE-2024-27281 Upstream-Status: Backport from https://github.com/ruby/rdoc/commit/da7a0c7553ef7250ca665a3fecdc01dbaacbb43d (From OE-Core rev: 16685f3b2d22eac20f0134cbd589c3b23a187084) Signed-off-by: Hitendra Prajapati Signed-off-by: Steve Sakoman

ruby: Fix CVE-2023-36617

2024-07-09T13:02:55+00:00

Backport two patches [1] [2] to fix CVE-2023-36617 [3]. [1] https://github.com/ruby/uri/commit/9010ee2536adda10a0555ae1ed6fe2f5808e6bf1 [2] https://github.com/ruby/uri/commit/9d7bcef1e6ad23c9c6e4932f297fb737888144c8 [3] https://www.ruby-lang.org/en/news/2023/06/29/redos-in-uri-CVE-2023-36617/ (From OE-Core rev: 959b2e5deae18969ffe1e9d90c901928bc47e332) Signed-off-by: Mingli Yu Signed-off-by: Steve Sakoman

Revert "python3/ruby/shadow: Revert add libxcrypt-native dependency"

2023-05-29T12:32:55+00:00

This reverts commit c6198e1b1c3e3a3413b6ff9f014b40114f1850db. This reverts commit 167c2c9f15c1bfe401c0512e420a76fa1379c012. This reverts commit 65532fc751dc00e5568e256166f7b259d3a3c06c. The dependencies should not be a -native in the target case. Revert these whilst the proper patch is worked out. (From OE-Core rev: 54eccb76eb8ba2086a56a30dfbb8aba06b02865a) Signed-off-by: Richard Purdie

ruby: add libxcrypt-native dependency

2023-05-28T08:09:47+00:00

crypt.h is otherwise taken from the host machine (From OE-Core rev: 167c2c9f15c1bfe401c0512e420a76fa1379c012) Signed-off-by: Markus Volk Signed-off-by: Richard Purdie

ruby: upgrade 3.2.1 -> 3.2.2

2023-04-13T10:56:07+00:00

(From OE-Core rev: b261bc704839b12769118f6f1c4207f3d19fe4fd) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

ruby: upgrade 3.2.0 -> 3.2.1

2023-02-20T15:18:30+00:00

License-Update: additional items under MIT (From OE-Core rev: 5e894cf7ddec6cb8f59d0d256e818548d041da74) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

ruby: Update the patch status

2023-01-26T21:06:57+00:00

It has been submitted to github as requested by ruby ml (From OE-Core rev: 2e21de700540fc2703fe39b93bf3894a4eb6d1d8) Signed-off-by: Khem Raj Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie