From 507890b593e819ea8d856ed12610d8e2a8f692db4a55a4fa697acf877a266f11 Mon Sep 17 00:00:00 2001 From: Marcus Rueckert Date: Thu, 29 Dec 2011 01:45:08 +0000 Subject: [PATCH 1/2] - update to 1.8.7.p357 - randomize hash to avoid algorithmic complexity attacks. CVE-2011-4815 - initialization of hash_seed to be at the beginning of the process. - initialize random seed at first. - call OpenSSL::Random.seed at the SecureRandom.random_bytes call. insert separators for array join. patch by Masahiro Tomita. [ruby-dev:44270] - mkconfig.rb: fix for continued lines. based on a patch from Marcus Rueckert at [ruby-core:20420]. - Infinity is greater than any bignum number. [ruby-dev:38672] - initialize store->ex_data.sk. [ruby-core:28907] [ruby-core:23971] [ruby-core:18121] OBS-URL: https://build.opensuse.org/package/show/devel:languages:ruby/ruby?expand=0&rev=25 --- ruby-1.8.7-p352.tar.bz2 | 3 --- ruby-1.8.7-p357.tar.bz2 | 3 +++ ruby.changes | 20 +++++++++++++++++++- ruby.spec | 4 ++-- 4 files changed, 24 insertions(+), 6 deletions(-) delete mode 100644 ruby-1.8.7-p352.tar.bz2 create mode 100644 ruby-1.8.7-p357.tar.bz2 diff --git a/ruby-1.8.7-p352.tar.bz2 b/ruby-1.8.7-p352.tar.bz2 deleted file mode 100644 index 6e0daaf..0000000 --- a/ruby-1.8.7-p352.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:9df4e9108387f7d24a6ab8950984d0c0f8cdbc1dad63194e744f1a176d1c5576 -size 4207576 diff --git a/ruby-1.8.7-p357.tar.bz2 b/ruby-1.8.7-p357.tar.bz2 new file mode 100644 index 0000000..14d903a --- /dev/null +++ b/ruby-1.8.7-p357.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:5c64b63a597b4cb545887364e1fd1e0601a7aeb545e576e74a6d8e88a2765a37 +size 4208157 diff --git a/ruby.changes b/ruby.changes index 0e8202d..e298ab5 100644 --- a/ruby.changes +++ b/ruby.changes @@ -1,10 +1,28 @@ +------------------------------------------------------------------- +Thu Dec 29 01:40:14 UTC 2011 - mrueckert@suse.de + +- update to 1.8.7.p357 + - randomize hash to avoid algorithmic complexity attacks. + CVE-2011-4815 + - initialization of hash_seed to be at the beginning of the + process. + - initialize random seed at first. + - call OpenSSL::Random.seed at the SecureRandom.random_bytes + call. insert separators for array join. patch by Masahiro + Tomita. [ruby-dev:44270] + - mkconfig.rb: fix for continued lines. based on a patch from + Marcus Rueckert at [ruby-core:20420]. + - Infinity is greater than any bignum number. [ruby-dev:38672] + - initialize store->ex_data.sk. [ruby-core:28907] + [ruby-core:23971] [ruby-core:18121] + ------------------------------------------------------------------- Thu Dec 1 17:03:34 UTC 2011 - coolo@suse.com - add automake as buildrequire to avoid implicit dependency ------------------------------------------------------------------- -Thu Jul 7 13:02:17 UTC 2011 - mrueckert@suse.com +Thu Jul 7 13:02:17 UTC 2011 - mrueckert@suse.de - update to 1.8.7.p352 - support for openssl compiled without SSLv2 diff --git a/ruby.spec b/ruby.spec index f10d743..83a688a 100644 --- a/ruby.spec +++ b/ruby.spec @@ -18,11 +18,11 @@ # norootforbuild Name: ruby -Version: 1.8.7.p352 +Version: 1.8.7.p357 Release: 0 # %define pkg_version 1.8.7 -%define patch_level p352 +%define patch_level p357 %define rb_arch %(echo %{_target_cpu}-linux | sed -e "s/i686/i586/" -e "s/hppa2.0/hppa/" -e "s/ppc/powerpc/") %define rb_ver %(echo %{pkg_version} | sed -e 's/\\\.[0-9]\\\+$//') # From 9df7175785609a973ff7ad8c35eeeb83489724dd49e7bf8d9f8688d837300465 Mon Sep 17 00:00:00 2001 From: Factory Maintainer Date: Tue, 6 Mar 2012 08:30:09 +0000 Subject: [PATCH 2/2] Accepting request 104504 from devel:openSUSE:Factory:patch-license patch license to follow spdx.org standard OBS-URL: https://build.opensuse.org/request/show/104504 OBS-URL: https://build.opensuse.org/package/show/devel:languages:ruby/ruby?expand=0&rev=26 --- ruby.changes | 5 +++++ ruby.spec | 14 +++++++------- 2 files changed, 12 insertions(+), 7 deletions(-) diff --git a/ruby.changes b/ruby.changes index e298ab5..7a63878 100644 --- a/ruby.changes +++ b/ruby.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Mon Feb 13 10:54:34 UTC 2012 - coolo@suse.com + +- patch license to follow spdx.org standard + ------------------------------------------------------------------- Thu Dec 29 01:40:14 UTC 2011 - mrueckert@suse.de diff --git a/ruby.spec b/ruby.spec index 83a688a..39ed53a 100644 --- a/ruby.spec +++ b/ruby.spec @@ -26,7 +26,7 @@ Release: 0 %define rb_arch %(echo %{_target_cpu}-linux | sed -e "s/i686/i586/" -e "s/hppa2.0/hppa/" -e "s/ppc/powerpc/") %define rb_ver %(echo %{pkg_version} | sed -e 's/\\\.[0-9]\\\+$//') # -License: GPLv2+ +License: GPL-2.0+ Group: Development/Languages/Ruby # BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -116,7 +116,7 @@ Authors: Yukihiro Matsumoto %package devel -License: GPLv2+ +License: GPL-2.0+ Group: Development/Languages/Ruby Summary: Development files to link against Ruby Requires: %{name} = %{version} @@ -134,7 +134,7 @@ Authors: Yukihiro Matsumoto %package tk -License: GPLv2+ +License: GPL-2.0+ Group: Development/Languages/Ruby Summary: TCL/TK bindings for Ruby Requires: %{name} = %{version} @@ -148,7 +148,7 @@ Authors: Yukihiro Matsumoto %package doc-ri -License: GPLv2+ +License: GPL-2.0+ Group: Development/Languages/Ruby Summary: Ruby Interactive Documentation Requires: %{name} = %{version} @@ -165,7 +165,7 @@ Authors: Yukihiro Matsumoto %package doc-html -License: GPLv2+ +License: GPL-2.0+ Group: Development/Languages/Ruby Summary: This package contains the HTML docs for ruby Requires: %{name} = %{version} @@ -182,7 +182,7 @@ Authors: Yukihiro Matsumoto %package examples -License: GPLv2+ +License: GPL-2.0+ Group: Development/Languages/Ruby Requires: %{name} = %{version} Summary: Example scripts for ruby @@ -196,7 +196,7 @@ Authors: Yukihiro Matsumoto %package test-suite -License: GPLv2+ +License: GPL-2.0+ Group: Development/Languages/Ruby Requires: %{name} = %{version} Summary: An Interpreted Object-Oriented Scripting Language