- update to 1.8.7.p357

- randomize hash to avoid algorithmic complexity attacks.
    CVE-2011-4815
  - initialization of hash_seed to be at the beginning of the
    process.
  - initialize random seed at first.
  - call OpenSSL::Random.seed at the SecureRandom.random_bytes
    call.  insert separators for array join.  patch by Masahiro
    Tomita.  [ruby-dev:44270]
  - mkconfig.rb: fix for continued lines.  based on a patch from
    Marcus Rueckert <darix AT opensu.se> at [ruby-core:20420].
  - Infinity is greater than any bignum number.  [ruby-dev:38672]
  - initialize store->ex_data.sk.  [ruby-core:28907]
    [ruby-core:23971] [ruby-core:18121]

OBS-URL: https://build.opensuse.org/package/show/devel:languages:ruby/ruby?expand=0&rev=25
This commit is contained in:
Marcus Rückert 2011-12-29 01:45:08 +00:00 committed by Git OBS Bridge
parent 4305f70b5d
commit 507890b593
4 changed files with 24 additions and 6 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:9df4e9108387f7d24a6ab8950984d0c0f8cdbc1dad63194e744f1a176d1c5576
size 4207576

3
ruby-1.8.7-p357.tar.bz2 Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:5c64b63a597b4cb545887364e1fd1e0601a7aeb545e576e74a6d8e88a2765a37
size 4208157

View File

@ -1,10 +1,28 @@
-------------------------------------------------------------------
Thu Dec 29 01:40:14 UTC 2011 - mrueckert@suse.de
- update to 1.8.7.p357
- randomize hash to avoid algorithmic complexity attacks.
CVE-2011-4815
- initialization of hash_seed to be at the beginning of the
process.
- initialize random seed at first.
- call OpenSSL::Random.seed at the SecureRandom.random_bytes
call. insert separators for array join. patch by Masahiro
Tomita. [ruby-dev:44270]
- mkconfig.rb: fix for continued lines. based on a patch from
Marcus Rueckert <darix AT opensu.se> at [ruby-core:20420].
- Infinity is greater than any bignum number. [ruby-dev:38672]
- initialize store->ex_data.sk. [ruby-core:28907]
[ruby-core:23971] [ruby-core:18121]
-------------------------------------------------------------------
Thu Dec 1 17:03:34 UTC 2011 - coolo@suse.com
- add automake as buildrequire to avoid implicit dependency
-------------------------------------------------------------------
Thu Jul 7 13:02:17 UTC 2011 - mrueckert@suse.com
Thu Jul 7 13:02:17 UTC 2011 - mrueckert@suse.de
- update to 1.8.7.p352
- support for openssl compiled without SSLv2

View File

@ -18,11 +18,11 @@
# norootforbuild
Name: ruby
Version: 1.8.7.p352
Version: 1.8.7.p357
Release: 0
#
%define pkg_version 1.8.7
%define patch_level p352
%define patch_level p357
%define rb_arch %(echo %{_target_cpu}-linux | sed -e "s/i686/i586/" -e "s/hppa2.0/hppa/" -e "s/ppc/powerpc/")
%define rb_ver %(echo %{pkg_version} | sed -e 's/\\\.[0-9]\\\+$//')
#