summaryrefslogtreecommitdiff
path: root/lang/ruby22-base/Makefile
AgeCommit message (Collapse)AuthorFilesLines
2017-09-15Update ruby22-base and ruby22 packages to 2.2.8.taca1-5/+1
pkgsrc change: clean up PILST. Ruby 2.2.8 Released Posted by usa on 14 Sep 2017 Ruby 2.2.8 has been released. This release includes several security fixes. Please check the topics below for details. * CVE-2017-0898: Buffer underrun vulnerability in Kernel.sprintf * CVE-2017-10784: Escape sequence injection vulnerability in the Basic authentication of WEBrick * CVE-2017-14033: Buffer underrun vulnerability in OpenSSL ASN1 docode * CVE-2017-14064: Heap exposure vulnerability in generating JSON * Multiple vulnerabilities in RubyGems * Updated bundled libyaml to version 0.1.7 Ruby 2.2 is now under the state of the security maintenance phase, until the endo of the March of 2018. After the date, maintenance of Ruby 2.2 will be ended. We recommend you start planning migration to newer versions of Ruby, such as 2.4 or 2.3.
2017-08-30Add patch to fix vulnerabilities of rubygems.taca1-1/+5
https://www.ruby-lang.org/en/news/2017/08/29/multiple-vulnerabilities-in-rubygems/ * a DNS request hijacking vulnerability * an ANSI escape sequence vulnerability * a DoS vulernerability in the query command * a vulnerability in the gem installer that allowed a malicious gem to overwrite arbitrary files Bump PKGREVISION.
2017-05-30Replace RUBY_VERSION_FULL with RUBY_VERSION since there is notaca1-2/+2
RUBY_VERSION_FULL contains Ruby's patchlevel.
2016-11-13Trying to move common configuration to common place.taca1-85/+2
2016-09-08Rename RUBY_VERSION_SUPPORTED into _RUBY_VERSIONS_ACCEPTED to follow thejoerg1-2/+2
naming scheme of the other multi-version packages. Add support for the coorresponding RUBY_VERSIONS_INCOMPATIBLE list.
2016-07-10Removed reference to undefined RUBY_LICENSE variable.rillig1-2/+1
2016-05-15Update ruby22-base to 2.2.5, no security fix.taca1-2/+1
Ruby 2.2.5 Released Posted by usa on 26 Apr 2016 Ruby 2.2.5 has been released. This release includes many bug fixes. See the ChangeLog for details.
2016-03-17Add upstream patch from SVN to fix build with RELRO.wiz1-3/+2
I don't see a relation to relro, but the linker found out about a missing symbol it didn't complain about before. SVN 54139: Thu Mar 17 11:36:27 2016 Nobuyoshi Nakada <nobu@ruby-lang.org> * ext/socket/option.c (inspect_tcpi_msec): more accurate condition for TCPI msec member inspection function. [ruby-core:74388] [Bug #12185] Bump PKGREVISION.
2016-03-05Bump PKGREVISION for security/openssl ABI bump.jperkin1-2/+2
2016-02-25Use OPSYSVARS.jperkin1-7/+3
2016-01-27Newer ruby releases require C99 due to use of signbit().jperkin1-2/+2
2015-12-20Bump PKGREVISION.taca1-1/+2
There are enough period that all patch files are ignored due to missing from distinfo.
2015-12-16Update ruby22{-base} to 2.2.4 (Ruby 2.2.4).taca1-2/+1
Ruby 2.2.4 Released Posted by nagachika on 16 Dec 2015 Ruby 2.2.4 has been released. This release includes a security fix for Fiddle extension. Please view the topic below for more details. * CVE-2015-7551: Unsafe tainted string usage in Fiddle and DL There are also some bugfixes. See ChangeLog for details.
2015-11-20Mark a few more variables as volatile to prevent clobbering by setjmp.joerg1-1/+2
Found due to crashes with very recent clang. Bump revision.
2015-10-14Add pkg-config to USE_TOOLS.sevan1-4/+5
Set PKG_CONFIG to empty as it removes reference to the build directory. Add checks for the presence of SSLv3 in OpenSSL/LibreSSL - obtained from http://www.libressl.org/patches.html Fix typo in comment s/refrect/reference. Reviewed by taca@ wiz@
2015-08-20Update ruby22-base to 2.2.3 (Ruby 2.2.3).taca1-2/+1
Release note: Ruby 2.2.3 Released Posted by nagachika on 18 Aug 2015 We are pleased to announce the release of Ruby 2.2.3. This is a TEENY version release of the stable 2.2 series. This release includes the security fix for a RubyGems domain name verification vulnerability. CVE-2015-3900 Request hijacking vulnerability in RubyGems 2.4.6 and earlier There are also some bugfixes. See ChangeLog for details.
2015-06-23Add security fix for rubygems, CVE-2015-3900.taca1-2/+2
Bump PKGREVISION.
2015-04-30Avoid to generate empty command line on some platforms:taca1-1/+2
$(DLLIB): $(OBJS) Makefile ... $(Q) $(POSTLINK) And POSTLINK is empty macro. In such case, GNU make ignore empty command line but BSD make tries to execute it and causes error. Bump PKGREVISION.
2015-03-08Adding Ruby 2.2.1 package, this is ruby22-base.taca1-0/+198
From release announce: We are pleased to announce the release of Ruby 2.2.1. This is the first TEENY version release of the stable 2.2 series. This release includes the fix for ffi build failure and memory leak issue on Symbol GC (See Bug #10686). See ChangeLog for details.
generated by cgit v1.2.3 (git 2.46.0) at 2026-03-06 05:20:31 +0000