elsa-2025-4063

{
  "cves": [
    "CVE-2024-41123",
    "CVE-2025-27219",
    "CVE-2024-41946",
    "CVE-2024-39908",
    "CVE-2024-43398",
    "CVE-2025-27220",
    "CVE-2025-27221"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "MODERATE"
  },
  "description": "ruby\n[3.1.7-145]\n- Upgrade to Ruby 3.1.7.\n  Resolves: RHEL-55408\n- Fix DoS vulnerability in REXML. (CVE-2024-39908)\n  Resolves: RHEL-57051\n- Fix DoS vulnerability in REXML. (CVE-2024-43398)\n  Resolves: RHEL-56002\n\n[3.1.5-144]\n- Fix REXML ReDoS vulnerability. (CVE-2024-49761)\n  Resolves: RHEL-68520\n\n[3.1.5-143]\n- Upgrade to Ruby 3.1.5.\n  Resolves: RHEL-35748\n- Fix buffer overread vulnerability in StringIO.\n  Resolves: RHEL-35749\n- Fix RCE vulnerability with .rdoc_options in RDoc.\n  Resolves: RHEL-35750\n- Fix arbitrary memory address read vulnerability with Regex search.\n  Resolves: RHEL-35751\n\n[3.1.4-142]\n- Upgrade to Ruby 3.1.4.\n  Resolves: RHEL-5584\n- Fix HTTP response splitting in CGI.\n  Resolves: CVE-2021-33621\n- Fix ReDos vulnerability in URI.\n  Resolves: CVE-2023-28755\n  Resolves: CVE-2023-36617\n- Fix ReDos vulnerability in Time.\n  Resolves: CVE-2023-28756\n- Make RDoc soft dependency in IRB.\n  Resolves: RHEL-5615\n\n[3.1.2-141]\n- Upgrade to Ruby 3.1.2.\n  Resolves: rhbz#2063772\n\n[3.0.2-140]\n- Fix rubygem-irb upgrade not working due to directory - symlink conversion.\n  Resolves: rhbz#2010949\n\n[3.0.2-139]\n- Upgrade to Ruby 3.0.2.\n  Related: rhbz#1938942\n- Fix command injection vulnerability in RDoc. (CVE-2021-31799)\n- Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.\n  (CVE-2021-31810)\n- Fix StartTLS stripping vulnerability in Net::IMAP (CVE-2021-32066)\n- Fix dependencies of gems with explicit source installed from a\n  different source. (CVE-2020-36327)\n- Pass ldflags to gem install via CONFIGURE_ARGS.\n  The same comment on the changelog 3.0.1-138 was wrong.\n\n[3.0.1-138]\n- Upgrade to Ruby 3.0.1 by merging Fedora rawhide branch (commit: 6b2ff68).\n  * Add missing rubygem- prefix for bundled provide of 'connection_pool'.\n  * Pass ldflags to gem install via CONFIGURE_ARGS\n  * Remove IRB dependency from rubygem-rdoc.\n  * Fix flaky excon test suite.\n  * Properly support DWARF5 debug information.\n      Related: rhbz#1920533\n  * Bundle OpenSSL into StdLib.\n  * Fix SEGFAULT in rubygem-shoulda-matchers test suite.\n  * Provide gem.build_complete file for binary gems.\n  * Re-enable test suite.\n  * ruby-default-gems have to depend on rubygem(io-console) due to reline.\n  * Fix SEGFAULT preventing rubygem-unicode to build on armv7hl.\n  * Add support for reworked RubyGems plugins.\n  * Use proper path for plugin wrappers.\n  * Extract RSS and REXML into separate subpackages, because they were moved from\n     default gems to bundled gems.\n  * Drop Net::Telnet and XMLRPC packages, because they were dropped from Ruby.\n  Resolves: rhbz#1938942\n- Fix FTBFS due to an incompatible load directive.\n\n[2.7.3-136]\n- Upgrade to Ruby 2.7.3.\n  Resolves: rhbz#1947938\n- Resolv::DNS: timeouts if multiple IPv6 name servers are given and address\n  contains leading zero\n  Resolves: rhbz#1944227\n\n[2.7.2-135]\n- Upgrade to Ruby 2.7.2.\n- Avoid possible timeout errors in TestBugReporter#test_bug_reporter_add.\n\n[2.7.1-133]\n- Fix require behavior allowing to load libraries multiple times.\n  Resolves: rhbz#1842989\n- Add ruby-default-gems dependency on irb.\n\n[2.7.1-133]\n- Ship racc binary.\n  Resolves: rhbz#1851388\n\n[2.7.1-132]\n- Update to Ruby 2.7.1 by merging Fedora master branch (commit: 2981648)\n  * Skip unstable tests on s390x.\n  * Skip JIT tests in RHEL 8.\n  Resolves: rhbz#1817135\n\n[2.6.3-106]\n- Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.\n  Resolves: rhbz#1727832\n- Properly support %prerelease in %gemspec_ macros.\n  Related: rhbz#1672575\n\n[2.6.3-105]\n- Update to Ruby 2.6.3 by merging Fedora master branch (commit: 1cc2a49)\n  * Properly generate 'ruby(rubygems)' versioned dependencies.\n  * Extract composition of dependecy strings into helper.\n  * Loosen RDoc dependency.\n  * Upstream fix adding -C flag instead of changing directory for gem build.\n  * Remove obsolete Group tag\n  * Fix '.include =' support in openssl.cnf.\n  * Link IRB back to StdLib.\n  * Link IRB files instead of directories.\n  * Exclude irb.rb from ruby-libs.\n  Resolves: rhbz#1672575\n\n[2.5.5-104]\n- Update to Ruby 2.5.5.\n  * Remove Patch25: ruby-2.6.0-Update-for-tzdata-2018f.patch; subsumed\n  * Remove Patch11: ruby-2.6.0-Try-to-update-cert.patch; subsumed\n  * Remove Patch19: ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with\n      -TLS-1.3.patch; subsumed\n  Resolves: rhbz#1688758\n- Don't ship .stp files when SystemTap support is disabled.\n  Related: rhbz#1657915\n- Fix CovScan issues.\n  Resolves: rhbz#1628592\n\n[2.5.3-103]\n- Refresh expired certificates to fix FTBFS.\n\n[2.5.3-102]\n- Fix Tokyo TZ tests.\n\n[2.5.3-101]\n- Update to Ruby 2.5.3.\n  Resolves: rhbz#1643092\n\n[2.5.1-100]\n- Properly harden package using -fstack-protector-strong.\n  * ruby-2.6.0-configure-fstack-protector-strong.patch\n  Resolves: rhbz#1624168\n\n[2.5.1-99]\n- Additional OpenSSL 1.1.1 fixes.\n  * ruby-2.6.0-fix-test-failure-with-TLS-1.3-maint.patch\n  * ruby-2.6.0-config-support-include-directive.patch\n  * ruby-2.6.0-use-larger-keys-for-SSL-tests.patch\n  Related: rhbz#1616213\n\n[2.5.1-99]\n- Fix generated rdoc template issues.\n  * ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch\n  Resolves: rhbz#1612026\n\n[2.5.1-97]\n- Fix TLS 1.3 issues.\n  * ruby-2.6.0-fix-test-failure-with-TLS-1.3.patch\n  * ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with-TLS-1.3.patch\n  Related: rhbz#1616213\n\n[2.5.1-96]\n- turn off tests\n- Related: bug#1614611\n\n[2.5.1-96]\n- Rebuild with fixed binutils\n\n[2.5.1-95]\n- Rebuild for new binutils\n\n[2.5.1-94]\n- Disable some test failing with OpenSSL 1.1.1.\n\n[2.5.1-94]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild\n\n[2.5.1-93]\n- Add macros to edit files lists in .gemspec\n  (gemspec_add_file and gemspec_remove_file).\n\n[2.5.1-93]\n- Make %gemspec_{add,remove}_dep modify .gemspec provided by %setup macro.\n\n[2.5.1-92]\n- Conflict requirement needs to generate dependency.\n- Stop using --with-setjmp-type=setjmp on aarch64 (rhbz#1545239).\n\n[2.5.1-92]\n- Update to Ruby 2.5.1.\n\n[2.5.0-91]\n- Don't force libraries used to build Ruby to its dependencies.\n- Re-enable GMP dependency.\n\n[2.5.0-90]\n- Drop GMP dependency.\n\n[2.5.0-89]\n- Rebuild with new LDFLAGS from redhat-rpm-config\n- Use --with-setjmp-type=setjmp on aarch64 to work around gcc issue (#1545239)\n\n[2.5.0-89]\n- Fix: Multiple vulnerabilities in RubyGems\n  https://bugzilla.redhat.com/show_bug.cgi?id=1547431\n  https://www.ruby-lang.org/en/news/2018/02/17/multiple-vulnerabilities-in-rubygems/\n\n[2.5.0-89]\n- Drop obsolete ldconfig scriptlets.\n- Add GMP dependency.\n- Use 'with' operator in RPM dependency generator.\n- Add conflicts RPM generator.\n- Fix thread_safe test suite segfaults.\n- Fix invalid licenses.\n\n[2.5.0-89]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[2.5.0-88]\n- Rebuilt for switch to libxcrypt\n\n[2.5.0-87]\n- Fix segfaults during generating of documentation.\n\n[2.5.0-86]\n- Upgrade to Ruby 2.5.0.\n\n[2.4.2-86]\n- Add macro to remove rubypick dependency.\n- Improve 'with' conditional statement as inline.\n\n[2.4.2-85]\n- Add macros to remove systemtap, git and cmake dependencies.\n\n[2.4.2-84]\n- Update to Ruby 2.4.2.\n\n[2.4.1-84]\n- Drop ruby-devel dependency on rubypick, which is pulled in transtitively.\n\n[2.4.1-83]\n- Fix 'IOError: stream closed' errors affecting Puma.\n- Temporary disable checksec on PPC64LE (rhbz#1479302).\n\n[2.4.1-82]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild\n\n[2.4.1-81]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild\n\n[2.4.1-80]\n- OpenSSL 1.1.0f-3 disables some weak ciphers. Adjust the package to pass\n  the tests suite.\n\n[2.4.1-79]\n- Update to Ruby 2.4.1.\n\n[2.4.0-78]\n- Fix OpenSSL symlinks.\n\n[2.4.0-77]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild\n\n[2.4.0-76]\n- Fix GCC 7.x compatibility (rhbz#1417590).\n- Use standardized multilib solution (rhbz#1412274).\n\n[2.4.0-75]\n- Apply patch fixing rubygem-mongo build failures.\n\n[2.4.0-74]\n- Rebuild again for f26-ruby24 sidetag\n\n[2.4.0-73]\n- Rebuild for readline 7.x\n\n[2.4.0-72]\n- Link files into directory to avoid dir = symlink isues.\n\n[2.4.0-71]\n- Add rubygem-io-console dependency for rubygem-rdoc.\n\n[2.4.0-70]\n- Upgrade to Ruby 2.4.0.\n- Move gemified xmlrpc into subpackage.\n- Move gemified openssl into subpackage.\n- Tk is removed from stdlib.\n- Extend 'gem_' macros for pre-release version support.\n\n[2.3.3-61]\n- Update to Ruby 2.3.3.\n- Exclude json.rb from ruby-libs (rhbz#1397370).\n\n[2.3.2-60]\n- Update to Ruby 2.3.2.\n\n[2.3.1-59]\n- Continue to use OpenSSL 1.0 for the moment.\n- Add gemspec_add_dep and gemspec_remove_dep macros.\n- Harden package.\n\n[2.3.1-58]\n- Workaround 'an invalid stdio handle' error on PPC (rhbz#1361037).\n\n[2.3.1-57]\n- Make symlinks for json gem.\n\n[2.3.1-56]\n- Requires rubygem(json) for rubygem-rdoc (rhbz#1325022).\n\n[2.3.1-55]\n- Update to Ruby 2.3.1.\n\n[2.3.0-54]\n- Add rubypick and rubygems requires to ruby-devel to deal with BuildRequires\n\n[2.3.0-53]\n- Backport trunk@53455 to make ruby-qt build\n\n[2.3.0-52]\n- Explicitly require RDoc, since weak dependencies are ignored by default.\n\n[2.3.0-51]\n- Load RubyGems prior ABRT hook to properly rescue RubyGems exceptions.\n\n[2.3.0-50]\n- Upgrade to Ruby 2.3.0.\n- Move gemified net-telnet into subpackage.\n- Add did_you_mean subpackage.\n- Add virtual provides for CCAN copylibs.\n- Use weak dependencies.\n\n[2.3.0-0.7.preview2]\n- Add systemtap tests.\n\n[2.2.4-47]\n- Update to Ruby 2.2.4.\n\n[2.2.3-46]\n- Fix ABRT hook autoloading.\n\n[2.2.3-45]\n- Add support for MIPS architecture to config.h\n\n[2.2.3-44]\n- Update to Ruby 2.2.3.\n\n[2.2.2-43]\n- Fix for 'dh key too small' error of OpenSSL 1.0.2+.\n\n[2.2.2-42]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild\n\n[2.2.2-41]\n- Fix the git BR following the git package split.\n\n[2.2.2-40]\n- Fix upgrade path (rubygem-io-console's version was recently bumped in F21\n  and makes the higher release to win).\n\n[2.2.2-11]\n- Bump release because of gems\n\n[2.2.2-1]\n- Update to Ruby 2.2.2\n\n[2.2.1-10]\n- Fix libruby.so versions in SystemTap scripts (rhbz#1202232).\n\n[2.2.1-9]\n- Update to Ruby 2.2.1.\n\n[2.2.0-8]\n- Rebuilt for Fedora 23 Change\n  https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code\n\n[2.2.0-7]\n- Fix directory ownership.\n\n[2.2.0-6]\n- Initialize all load paths in operating_system.rb.\n\n[2.2.0-5]\n- Make operating_system.rb more robust.\n- Add RubyGems stub headers for bundled gems.\n\n[2.2.0-4]\n- Add missing rubygem-test-unit dependency on rubygem-power_assert.\n\n[2.2.0-3]\n- Bump release to avoid EVR issue on rubygem-test-unit\n\n[2.2.0-1]\n- Upgrade to Ruby 2.2.0.\n- Explicitly list RubyGems directories to avoid accidentaly packaged content.\n- Split test-unit and power_assert gems into separate sub-packages.\n- Drop libdb dependency in favor of gdbm.\n\n[2.1.5-26]\n- Disbable sse2 on i668 (bug #1101811)\n\n[2.1.5-25]\n- Update to Ruby 2.1.5.\n\n[2.1.4-24]\n- Update to Ruby 2.1.4.\n- Include only vendor directories, not their content (rhbz#1114071).\n- Fix 'invalid regex' warning for non-rubygem packages (rhbz#1154067).\n- Use load macro introduced in RPM 4.12.\n\n* Mon Aug 18 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild\n\n[2.1.2-23]\n- Fix FTBFS\n- Specify tcl/tk 8.6\n- Add upstream patch to build with libffi 3.1\n\n* Sun Jun 08 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild\n\n* Wed May 21 2014 Jaroslav Skarvada jskarvad@redhat.com\n- Rebuilt for https://fedoraproject.org/wiki/Changes/f21tcl86\n\n[2.1.2-21]\n- Update to Ruby 2.1.2\n\n[2.1.1-20]\n- Remove useless exclude (rhbz#1065897).\n- Extract load macro into external file and include it.\n- Kill bundled certificates.\n\n[2.1.1-19]\n- Correctly expand  in some Makefiles, e.g. eruby.\n\n[2.1.1-18]\n- Update to Ruby 2.1.1.\n- Revert regression of Hash#reject.\n\n[2.1.0-19]\n- Add RPM dependency generators for RubyGems.\n\n[2.1.0-19]\n- Don't link cert.pem explicitely\n\n[2.1.0-18]\n- Don't generate documentation on unexpected places.\n- Detect if rubygems are running under rpmbuild and install gem binary\n  extensions into appropriate place.\n- Add support for ppc64le arch (rhbz#1053263).\n- Re-enable some test cases, which are passing now with Kernel 3.12.8+.\n- Backport fix for floating point issues on i686.\n\n[2.1.0-17]\n- Upgrade to Ruby 2.1.0.\n- Move RPM macros into /usr/lib/rpm/macros.d directory.\n- Allow MD5 in OpenSSL for tests.\n\n[2.0.0.247-15]\n- Move Psych symlinks to vendor dir, to prevent F18 - F19 upgrade issues\n  (rhbz#988490).\n\n[2.0.0.247-14]\n- Add forgotten psych.rb link into rubygem-psych to fix 'private method load'\n  called for Psych:Moduler' error (rhbz#979133).\n\n[2.0.0.247-13]\n- Fixes multilib conlicts of .gemspec files.\n- Make symlinks for psych gem to ruby stdlib dirs (rhbz#979133).\n- Use system-wide cert.pem.\n\n[2.0.0.247-12]\n- Fix RubyGems search paths when building gems with native extension\n  (rhbz#979133).\n\n[2.0.0.247-11]\n- Fix RubyGems version.\n\n[2.0.0.247-10]\n- Better support for build without configuration (rhbz#977941).\n\n[2.0.0.247-9]\n- Update to Ruby 2.0.0-p247 (rhbz#979605).\n- Fix CVE-2013-4073.\n- Fix for wrong makefiles created by mkmf (rhbz#921650).\n- Add support for ABRT autoloading.\n\n[2.0.0.195-8]\n- Update to Ruby 2.0.0-p195 (rhbz#917374).\n- Fix object taint bypassing in DL and Fiddle (CVE-2013-2065).\n- Fix build against OpenSSL with enabled ECC curves.\n- Add aarch64 support (rhbz#926463).\n\n[2.0.0.0-7]\n- Macro definition moved into macros.ruby and macros.rubygems files.\n- Added filtering macros.\n- Filter automatically generated provides of private libraries (rhbz#947408).\n\n[2.0.0.0-6]\n- Fix RbConfig::CONFIG['exec_prefix'] returns empty string (rhbz#924851).\n\n[2.0.0.0-5]\n- Make Ruby buildable without rubypick.\n- Prevent random test failures.\n\n[2.0.0.0-4]\n- Don't mark rpm config file as %config (fpc#259)\n\n[2.0.0.0-3]\n- Avoid 'method redefined;' warnings due to modified operating_system.rb.\n- Fix strange paths created during build of binary gems.\n\n[2.0.0.0-2]\n- Prevent squash of %gem_install with following line.\n\n[2.0.0.0-1]\n- Update to Ruby 2.0.0-p0.\n- Change %{ruby_extdir} to %{ruby_extdir_mri} in preparation for better\n  JRuby support.\n\n[2.0.0.0-0.3.r39387]\n- Move test-unit.gemspec to -libs subpackage for now because rubygems\n  2.0.0 does not create this\n\n[2.0.0.0-0.2.r39387]\n- Fix issues with wrong value of Rubygem's shebang introduced in r39267.\n\n[2.0.0.0-0.1.r39387]\n- Upgrade to Ruby 2.0.0 (r39387).\n- Introduce %gem_install macro.\n- Build against libdb instead of libdb4 (rhbz#894022).\n- Move native extensions from exts to ruby directory.\n- Enable most of the PPC test suite.\n- Change ruby(abi) - ruby(release).\n- Rename ruby executable to ruby-mri, to be prepared for RubyPick.\n- Add ruby(runtime_executable) virtual provide, which is later used\n  by RubyPick.\n- RDoc now depends on JSON.\n- Try to make -doc subpackage noarch again, since the new RDoc should resolve\n  the arch dependent issues (https://github.com/rdoc/rdoc/issues/71).\n- Enable SystemTap support.\n- Add TapSet for Ruby.\n- Split Psych into rubygem-psych subpackage.\n\n[1.9.3.385-28]\n- Update to 1.9.3 p385\n\n[1.9.3.374-27]\n- Update to 1.9.3 p374\n- Fix provided variables in pkgconfig (bug 789532:\n  Vit Ondruch vondruch@redhat.com)\n\n[1.9.3.362-26]\n- Provide non-versioned pkgconfig file (bug 789532)\n- Use db5 on F-19 (bug 894022)\n\n[1.9.3.362-25]\n- Backport fix for the upstream PR7629, save the proc made from the given block\n  (bug 895173)\n\n[1.9.3.362-24]\n- Update to 1.9.3.362\n\n[1.9.3.327-23]\n- Skipping test_parse.rb (fails on ARM at line 787)\n- http://bugs.ruby-lang.org/issues/6899\n\n[1.9.3.327-23]\n- Skip test_str_crypt (on rawhide) for now (upstream bug 7312)\n\n[1.9.3.327-22]\n- Ignore some network related tests\n\n[1.9.3.327-21]\n- Update to 1.9.3.327\n- Fix Hash-flooding DoS vulnerability on MurmurHash function\n  (CVE-2012-5371)\n\n[1.9.3.286-19]\n- Update to 1.9.3 p286\n- Don't create files when NUL-containing path name is passed\n  (bug 865940, CVE-2012-4522)\n\n[1.9.3.194-18]\n- Patch from trunk for CVE-2012-4464, CVE-2012-4466\n\n[1.9.3.194-17]\n- Split documentation into -doc subpackage (rhbz#854418).\n\n[1.9.3.194-16]\n- Revert the dependency of ruby-libs on rubygems (rhbz#845011, rhbz#847482).\n\n[1.9.3.194-15]\n- ruby-libs must require rubygems (rhbz#845011).\n\n[1.9.3.194-14]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild\n\n[1.9.3.194-13]\n- Make the bigdecimal gem a runtime dependency of Ruby.\n\n[1.9.3.194-12]\n- Make symlinks for bigdecimal and io-console gems to ruby stdlib dirs (RHBZ 829209).\n\n[1.9.3.194-11]\n- Fix license to contain Public Domain.\n- macros.ruby now contains unexpanded macros.\n\n[1.9.3.194-10.1]\n- Bump release\n\n[1.9.3.194-1]\n- Update to Ruby 1.9.3-p194.\n\n[1.9.3.125-3]\n- disable check on ppc(64), RH bugzilla 803698\n\n[1.9.3.125-2]\n- Temporarily disable make check on ARM until it's fixed upstream. Tracked in RHBZ 789410\n\n[1.9.3.125-1]\n- Upgrade to Ruby 1.9.3-p125.\n\n[1.9.3.0-7]\n- Make mkmf.rb verbose by default\n\n[1.9.3.0-6]\n- Relax dependencies to allow external updates of bundled gems.\n\n[1.9.3.0-5]\n- Initial release of Ruby 1.9.3.\n- Add rubygems dependency on io-console for user interactions.\n- Gems license clarification.\n\n[1.9.3.0-4]\n- Bundled gems moved into dedicated directories and subpackages.\n- Create and own RubyGems directories for binary extensions.\n- Fix build with GCC 4.7.\n\n[1.9.3.0-3]\n- Fix RHEL build.\n- Fixed directory ownership.\n- Verose build output.\n\n[1.9.3.0-2]\n- Install RubyGems outside of Ruby directory structure.\n- RubyGems has not its own -devel subpackage.\n- Enhanced macros.ruby and macros.rubygems.\n- All tests are green now (bkabrda).\n\n[1.9.3.0-1]\n- Initial package\n\n[1.8.7.357-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild\n\n[1.8.7.357-1]\n- Update to 1.8.7p357\n- Randomize hash on process startup (CVE-2011-4815, bug 750564)\n\n[1.8.7.352-2]\n- dont normalise arm cpus to arm\n- there is something weird about how ruby choses where to put bits\n\n[1.8.7.352-3]\n- F-17: kill gdbm support for now due to licensing compatibility issue\n\n[1.8.7.352-2]\n- F-17: rebuild against new gdbm\n\n[1.8.7.352-1]\n- Update to 1.8.7 p352\n- CVE-2011-2686 is fixed in this version (bug 722415)\n- Update ext/tk to the latest git\n- Remove duplicate path entry (bug 718695)\n\n[1.8.7.334-4]\n- Once fix FTBFS (bug 716021)\n\n[1.8.7.334-3]\n- normalise arm cpus to arm\n\n[1.8.7.334-2]\n- Own %{_normalized_cpu}-%{_target_os} directory (bug 708816)\n\n[1.8.7.334-1]\n- Update to 1.8.7 p334\n\n[1.8.7.330-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild\n\n[1.8.7.330-2]\n- nomalise the 32 bit sparc archs to sparc\n\n[1.8.7.330-1]\n- Update to 1.8.7 p330\n- ext/tk updated to the newest header\n\n[1.8.7.302-2]\n- Avoid multilib conflict on -libs subpackage (bug 649174)\n\n[1.8.7.302-1]\n- Update to 1.8.7.302\n- CVE-2010-0541 (bug 587731) is fixed in this version\n- Update ext/tk to the latest head\n\n[1.8.7.299-5]\n- More cleanup of spec file, expecially for rpmlint issue\n- build ri files in %build\n\n[1.8.7.299-4]\n- Cleanup spec file\n- Make -irb, -rdoc subpackage noarch\n- Make dependencies between arch-dependent subpackages isa specific\n- Improve sample documentation gathering\n\n[1.8.7.299-3]\n- updated packaged based on feedback (from mtasaka)\n- added comments to all patches / sources\n- obsoleted ruby-mode, as it's now provided by the emacs package itself\n- readded missing documentation\n- various small compatability/regression fixes\n\n[1.8.7.299-2]\n- readded bits to pull tk package from upstream source branch\n- removed unecessary .tk.old dir\n- renamed macros which may cause confusion, removed unused ones\n\n[1.8.7.299-1]\n- integrate more of jmeyering's and mtaska's feedback\n- removed emacs bits that are now shipped with the emacs package\n- various patch and spec cleanup\n- rebased to ruby 1.8.7 patch 299, removed patches no longer needed:\n   ruby-1.8.7-openssl-1.0.patch, ruby-1.8.7-rb_gc_guard_ptr-optimization.patch\n\n[1.8.7.249-5]\n- Various fixes\n\n[1.8.7.249-4]\n- Fixed incorrect paths in 1.8.7 rpm\n\n[1.8.7.249-3]\n- Integrated Jim Meyering's feedback and changes in to:\n- remove trailing blanks\n- placate rpmlint\n- ruby_* definitions: do not use trailing slashes in directory names\n- _normalized_cpu: simplify definition\n\n[1.8.7.249-2]\n- Integrate mtasaka's feedback and changes\n- patch101 ruby_1_8_7-rb_gc_guard_ptr-optimization.patch\n\n[1.8.7.249-1]\n- Initial Ruby 1.8.7 specfile\n\n[1.8.6.399-5]\n- Retry for bug 559158, Simplify the OpenSSL::Digest class\n  pull more change commits from ruby_1_8 branch\n\n[1.8.6.399-4]\n- Patch36 (ruby-1.8.x-RHASH_SIZE-rb_hash_lookup-def.patch)\n  also backport rb_hash_lookup definition (bug 592936)\n\n[1.8.6.399-3]\n- ruby-1.8.x-null-class-must-be-Qnil.patch (bug 530407)\n- Recreate some patches using upstream svn when available, and\n  add some comments for patches\n\n[1.8.6.399-2]\n- tcltk: Give up using potentially unmaintained ruby_1_8_6 branch\n  and instead completely replace with ruby_1_8 branch head\n  (at this time, using rev 27738)\n  (seems to fix 560053, 590503)\n- Fix Japanese encoding strings under ruby-tcltk/ext/tk/sample/\n\n[1.8.6.399-1]\n- Update to 1.8.6 p 399 (bug 579675)\n- Patch to fix gc bug causing open4 crash (bug 580993)\n\n[1.8.6.388-9]\n- F-14: rebuild against new gdbm\n\n* Thu Jan 28 2010 Mamoru Tasaka mtasaka@ioa.s.u-tokyo.ac.jp\n- Once revert the previous change (patch34)\n\n[1.8.6.388-8]\n- Backport openssl/digest functions providing digest and hexdigest functions\n  directly in OpenSSL::Digest.methods\n- Make sure that Red Hat people version their changelog entries\n- This is actually release #1, but now needs to be release #7\n\n[1.8.6.388-1]\n- Add conditional for RHEL.\n\n[1.8.6.383-6]\n- CVE-2009-4492 ruby WEBrick log escape sequence (bug 554485)\n\n[1.8.6.383-5]\n- Change mkmf.rb to use LIBRUBYARG_SHARED so that have_library() works\n  without libruby-static.a (bug 428384)\n- And move libruby-static.a to -static subpackage\n\n[1.8.6.383-4]\n- Use bison to regenerate parse.c to keep the original format of error\n  messages (bug 530275 comment 4)\n\n[1.8.6.383-3]\n- Patch so that irb saves its history (bug 518584, ruby issue 1556)\n\n[1.8.6.383-2]\n- Update to 1.8.6 patchlevel 383 (bug 520063)\n\n[1.8.6.369-5]\n- Much better idea for Patch31 provided by Akira TAGOH tagoh@redhat.com\n\n[1.8.6.369-4]\n- Fix the search path of ri command for ri manuals installed with gem\n  (bug 528787)\n\n[1.8.6.369-3]\n- Rebuild against new openssl\n\n[1.8.6.369-2]\n- Make sure that readline.so is linked against readline 5 because\n  Ruby is under GPLv2\n\n[1.8.6.369-1]\n- New patchlevel fixing CVE-2009-1904\n- Fix directory on ARM (#506233, Kedar Sovani)\n\n[1.8.6.368-1]\n- New upstream release (p368)\n\n[1.8.6.287-8]\n- Merge Review fix (#226381)\n\n[1.8.6.287-7]\n- Fix regression in CVE-2008-3790 (#485383)\n\n[1.8.6.287-6]\n- Again use -O2 optimization level\n- i586 should search i386-linux directory (on = F-11)\n\n[1.8.6.287-5]\n- Rebuild for gcc4.4\n\n[1.8.6.287-3]\n- CVE-2008-5189: CGI header injection.\n\n[1.8.6.287-2]\n- CVE-2008-3790: DoS vulnerability in the REXML module.\n\n[1.8.6.287-1]\n- New upstream release.\n- Security fixes.\n  - CVE-2008-3655: Ruby does not properly restrict access to critical\n                   variables and methods at various safe levels.\n  - CVE-2008-3656: DoS vulnerability in WEBrick.\n  - CVE-2008-3657: Lack of taintness check in dl.\n  - CVE-2008-1447: DNS spoofing vulnerability in resolv.rb.\n  - CVE-2008-3443: Memory allocation failure in Ruby regex engine.\n- Remove the unnecessary backported patches.\n\n[1.8.6.230-5]\n- rebuild against db4-4.7\n\n[1.8.6.230-4]\n- Backported from upstream SVN to fix a segfault issue with Array#fill.\n\n[1.8.6.230-3]\n- Backported from upstream SVN to fix a segfault issue. (#452825)\n- Backported from upstream SVN to fix an integer overflow in rb_ary_fill.\n\n[1.8.6.230-2]\n- Fix a segfault issue. (#452810)\n\n[1.8.6.230-1]\n- New upstream release.\n- Security fixes. (#452295)\n  - CVE-2008-1891: WEBrick CGI source disclosure.\n  - CVE-2008-2662: Integer overflow in rb_str_buf_append().\n  - CVE-2008-2663: Integer overflow in rb_ary_store().\n  - CVE-2008-2664: Unsafe use of alloca in rb_str_format().\n  - CVE-2008-2725: Integer overflow in rb_ary_splice().\n  - CVE-2008-2726: Integer overflow in rb_ary_splice().\n- ruby-1.8.6.111-CVE-2007-5162.patch: removed.\n- Build ruby-mode package for all archtectures.\n\n[1.8.6.114-1]\n- Security fix for CVE-2008-1145.\n- Improve a spec file. (#226381)\n  - Correct License tag.\n  - Fix a timestamp issue.\n  - Own a arch-specific directory.\n\n[1.8.6.111-9]\n- Autorebuild for GCC 4.3\n\n[1.8.6.111-8]\n- Rebuild for gcc-4.3.\n\n[1.8.6.111-7]\n- Revert the change of libruby-static.a. (#428384)\n\n[1.8.6.111-6]\n- Fix an unnecessary replacement for shebang. (#426835)\n\n[1.8.6.111-5]\n- Rebuild.\n\n[1.8.6.111-4]\n- Clean up again.\n\n[1.8.6.111-3]\n- Clean up the spec file.\n- Remove ruby-man-1.4.6 stuff. this is entirely the out-dated document.\n  this could be replaced by ri.\n- Disable the static library building.\n\n[1.8.6.111-2]\n- Rebuild for openssl bump\n\n* Wed Oct 31 2007 Akira TAGOH tagoh@redhat.com\n- Fix the dead link.\n\n[1.8.6.111-1]\n- New upstream release.\n- ruby-1.8.6.111-CVE-2007-5162.patch: Update a bit with backporting the changes\n   at trunk to enable the fix without any modifications on the users' scripts.\n   Note that Net::HTTP#enable_post_connection_check isn't available anymore.\n   If you want to disable this post-check, you should give OpenSSL::SSL::VERIFY_NONE\n   to Net::HTTP#verify_mode= instead of.\n\n[1.8.6.110-2]\n- Enable pthread support for ppc too. (#201452)\n- Fix unexpected dependencies appears in ruby-libs. (#253325)\n\n[1.8.6.110-1]\n- New upstream release.\n  - ruby-r12567.patch: removed.\n- ruby-1.8.6-CVE-2007-5162.patch: security fix for Net::HTTP that is\n  insufficient verification of SSL certificate.\n\n[1.8.6.36-4]\n- Rebuild\n\n* Fri Aug 10 2007 Akira TAGOH tagoh@redhat.com\n- Update License tag.\n\n[1.8.6.36-3]\n- ruby-r12567.patch: backport patch from upstream svn to get rid of\n  the unnecessary declarations. (#245446)\n\n[1.8.6.36-2]\n- New upstream release.\n  - Fix Etc::getgrgid to get the correct gid as requested. (#236647)\n\n[1.8.6-2]\n- Fix search path breakage. (#234029)\n\n[1.8.6-1]\n- New upstream release.\n- clean up a spec file.\n\n[1.8.5.12-2]\n- Rebuild\n\n[1.8.5.12-1]\n- New upstream release.\n\n[1.8.5.2-1]\n- security fix release.\n\n[1.8.5-4]\n- security fix release.\n- ruby-1.8.5-cgi-CVE-2006-5467.patch: fix a CGI multipart parsing bug that\n  causes the denial of service. (#212396)\n\n[1.8.5-3]\n- rebuilt for unwind info generation, broken in gcc-4.1.1-21\n\n[1.8.5-2]\n- fixed rbconfig.rb to refer to DESTDIR for sitearchdir. (#207311)\n\n[1.8.5-1]\n- New upstream release.\n- removed the unnecessary patches:\n  - ruby-1.8.4-no-eaccess.patch\n  - ruby-1.8.4-64bit-pack.patch\n  - ruby-1.8.4-fix-insecure-dir-operation.patch\n  - ruby-1.8.4-fix-insecure-regexp-modification.patch\n  - ruby-1.8.4-fix-alias-safe-level.patch\n- build with --enable-pthread except on ppc.\n- ruby-1.8.5-hash-memory-leak.patch: backported from CVS to fix a memory leak\n  on Hash. [ruby-talk:211233]\n\n[1.8.4-12]\n- owns sitearchdir. (#201208)\n\n[1.8.4-11]\n- security fixes [CVE-2006-3694]\n  - ruby-1.8.4-fix-insecure-dir-operation.patch:\n  - ruby-1.8.4-fix-insecure-regexp-modification.patch: fixed the insecure\n    operations in the certain safe-level restrictions. (#199538)\n  - ruby-1.8.4-fix-alias-safe-level.patch: fixed to not bypass the certain\n    safe-level restrictions. (#199543)\n\n[1.8.4-10.fc6.1]\n- rebuild\n\n[1.8.4-10]\n- fixed the wrong file list again. moved tcltk library into ruby-tcltk.\n  (#195872)\n\n[1.8.4-8]\n- ruby-deprecated-sitelib-search-path.patch: correct the order of search path.\n\n[1.8.4-7]\n- exclude ppc64 to make ruby-mode package. right now emacs.ppc64 isn't provided\n  and buildsys became much stricter.\n- ruby-deprecated-sitelib-search-path.patch: applied to add more search path\n  for backward compatiblity.\n- added byacc to BuildReq. (#194161)\n\n[1.8.4-6]\n- ruby-deprecated-search-path.patch: added the deprecated installation paths\n  to the search path for the backward compatibility.\n- added a Provides: ruby(abi) to ruby-libs.\n- ruby-1.8.4-64bit-pack.patch: backport patch from upstream to fix unpack('l')\n  not working on 64bit arch and integer overflow on template 'w'. (#189350)\n- updated License tag to be more comfortable, and with a pointer to get more\n  details, like Python package does. (#179933)\n- clean up.\n\n* Wed Apr 19 2006 Akira TAGOH tagoh@redhat.com\n- ruby-rubyprefix.patch: moved all arch-independent modules under /usr/lib/ruby\n  and keep arch-dependent modules under /usr/lib64/ruby for 64bit archs.\n  so 'rubylibdir', 'sitelibdir' and 'sitedir' in Config::CONFIG points to\n  the kind of /usr/lib/ruby now. (#184199)\n\n[1.8.4-4]\n- correct sitelibdir. (#184198)\n\n[1.8.4-3.2]\n- bump again for double-long bug on ppc(64)\n\n[1.8.4-3.1]\n- rebuilt for new gcc4.1 snapshot and glibc changes\n\n[1.8.4-3]\n- ruby-1.8.4-no-eaccess.patch: backported from ruby CVS to avoid conflict\n  between newer glibc. (#179835)\n\n[1.8.4-2]\n- ruby-tcltk-multilib.patch: fixed a typo.\n\n[1.8.4-1]\n- New upstream release.\n  - fixed a missing return statement. (#140833)\n  - fixed an use of uninitialized variable. (#144890)\n\n[1.8.4-0.4.preview2]\n- updates to 1.8.4-preview2.\n- renamed the packages to ruby-* (#175765)\n  - irb  - ruby-irb\n  - rdoc - ruby-rdoc\n  - ri   - ruby-ri\n- added tcl-devel and tk-devel into BuildRequires.\n\n* Fri Dec 09 2005 Jesse Keating jkeating@redhat.com\n- rebuilt\n\n[1.8.4-0.3.preview1]\n- rebuilt against the latest openssl.\n\n[1.8.4-0.2.preview1]\n- build-deps libX11-devel instead of xorg-x11-devel.\n\n[1.8.4-0.1.preview1]\n- New upstream release.\n- ruby-1.8.2-strscan-memset.patch: removed because it's no longer needed.\n\n[1.8.3-4]\n- moved the documents from ruby-libs to ruby-docs, which contains the arch\n  specific thing and to be multilib support. (#168826)\n\n[1.8.3-3]\n- fixed the wrong file list. the external library for tcl/tk was included\n  in ruby-libs unexpectedly.\n\n[1.8.3-2]\n- ruby-multilib.patch: added another chunk for multilib. (#169127)\n\n[1.8.3-1]\n- New upstream release.\n- Build-Requires xorg-x11-devel instead of XFree86-devel.\n- ruby-multilib.patch: applied for only 64-bit archs.\n- ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: removed. it has already been in upstream.\n\n[1.8.2-9]\n- ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: fixed the arbitrary command execution\n  on XMLRPC server. (#161096)\n\n[1.8.2-8]\n- ruby-1.8.2-tcltk-multilib.patch: applied to get tcltklib.so built. (#160194)\n\n[1.8.2-7]\n- ruby-1.8.2-deadcode.patch: removed the dead code from the source. (#146108)\n- make sure that all documentation files in ruby-docs are the world-\n  readable. (#147279)\n\n[1.8.2-6]\n- ruby-1.8.2-strscan-memset.patch: fixed an wrong usage of memset(3).\n\n[1.8.2-5]\n- rebuilt\n\n[1.8.2-4]\n- fixed the wrong generation of file manifest. (#146055)\n- spec file clean up.\n\n[1.8.2-3]\n- separated out to rdoc package.\n- make the dependency of irb for rdoc. (#144708)\n\n[1.8.2-2]\n- Rebuilt for new readline.\n\n[1.8.2-1]\n- New upstream release.\n- ruby-1.8.1-ia64-stack-limit.patch: removed - it's no longer needed.\n- ruby-1.8.1-cgi_session_perms.patch: likewise.\n- ruby-1.8.1-cgi-dos.patch: likewise.\n- generated Ruby interactive documentation - senarated package.\n  it's now provided as ri package. (#141806)\n\n[1.8.1-10]\n- rebuild against db-4.3.21.\n\n[1.8.1-9]\n- ruby-1.8.1-cgi-dos.patch: security fix [CAN-2004-0983]\n- ruby-1.8.1-cgi_session_perms.patch: security fix [CAN-2004-0755]\n\n[1.8.1-8]\n- added openssl-devel and db4-devel into BuildRequires (#137479)\n\n[1.8.1-7]\n- require emacs-common instead of emacs.\n\n[1.8.1-4]\n- updated the documentation.\n\n* Tue Jun 15 2004 Elliot Lee sopwith@redhat.com\n- rebuilt\n\n* Tue Mar 02 2004 Elliot Lee sopwith@redhat.com\n- rebuilt\n\n* Fri Feb 13 2004 Elliot Lee sopwith@redhat.com\n- rebuilt\n\n[1.8.1-1]\n- New upstream release.\n- don't use any optimization for ia64 to avoid the build failure.\n- ruby-1.8.1-ia64-stack-limit.patch: applied to fix SystemStackError when the optimization is disabled.\n\n[1.8.0-3]\n- rebuild against db-4.2.52.\n\n[1.8.0-2]\n- rebuild against db-4.2.42.\n\n[1.8.0-1]\n- New upstream release.\n\n[1.6.8-9.1]\n- rebuilt\n\n[1.6.8-9]\n- ruby-1.6.8-castnode.patch: handling the nodes with correct cast.\n  use this patch now instead of ruby-1.6.8-fix-x86_64.patch.\n\n[1.6.8-8]\n- rebuilt\n\n[1.6.8-7]\n- fix the gcc warnings. (#82192)\n- ruby-1.6.8-fix-x86_64.patch: correct a patch.\n  NOTE: DON'T USE THIS PATCH FOR BIG ENDIAN ARCHITECTURE.\n- ruby-1.6.7-long2int.patch: removed.\n\n* Wed Jun 04 2003 Elliot Lee sopwith@redhat.com\n- rebuilt\n\n[1.6.8-5]\n- rebuild against ucs4 tcltk\n\n* Wed Jan 22 2003 Tim Powers timp@redhat.com\n- rebuilt\n\n[1.6.8-3]\n- ruby-1.6.8-multilib.patch: applied to fix the search path issue on x86_64\n\n[1.6.8-2]\n- ruby-1.6.8-require.patch: applied to fix the search bug in require.\n- don't apply long2int patch to s390 and s390x. it doesn't work.\n\n[1.6.8-1]\n- New upstream release.\n- removed some patches. it's no longer needed.\n  - ruby-1.6.7-100.patch\n  - ruby-1.6.7-101.patch\n  - ruby-1.6.7-102.patch\n  - ruby-1.6.7-103.patch\n  - 801_extmk.rb-shellwords.patch\n  - 801_mkmf.rb-shellwords.patch\n  - 804_parse.y-new-bison.patch\n  - 805_uri-bugfix.patch\n  - ruby-1.6.6-900_XXX_strtod.patch\n  - ruby-1.6.7-sux0rs.patch\n  - ruby-1.6.7-libobj.patch\n\n[1.6.7-14]\n- rebuild to update tcltk deps\n\n[1.6.7-13]\n- Remove ExcludeArch: x86_64\n- Fix x86_64 ruby with long2int.patch (ruby was assuming that sizeof(long)\n  == sizeof(int). The patch does not fix the source of the problem, just\n  makes it a non-issue.)\n- _smp_mflags\n\n[1.6.7-12]\n- rebuild to fix broken tcltk deps\n\n[1.6.7-11]\n- use %configure macro instead of configure script.\n- use the latest config.{sub,guess}.\n- get archname from rbconfig.rb for %dir\n- applied some patches from Debian:\n  - 801_extmk.rb-shellwords.patch: use Shellwords\n  - 801_mkmf.rb-shellwords.patch: mkmf.rb creates bad Makefile. the Makefile\n    links libruby.a to the target.\n  - 803_sample-fix-shbang.patch: all sample codes should be\n    s|/usr/local/bin|/usr/bin|g\n  - 804_parse.y-new-bison.patch: fix syntax warning.\n  - 805_uri-bugfix.patch: uri.rb could not handle correctly broken mailto-uri.\n- add ExcludeArch x86_64 temporarily to fix Bug#74581. Right now ruby can't be\n  built on x86_64.\n\n[1.6.7-10]\n- moved sitedir to /usr/lib/ruby/site_ruby again according as our perl and\n  python.\n- ruby-1.6.7-resolv1.patch, ruby-1.6.7-resolv2.patch: applied to fix 'Too many\n  open files - '/etc/resolv.conf'' issue. (Bug#64830)\n\n[1.6.7-9]\n- add the owned directory.\n\n[1.6.7-8]\n- fix typo.\n\n[1.6.7-7]\n- removed the ruby-mode-xemacs because it's merged to the xemacs sumo.\n\n* Fri Jun 21 2002 Tim Powers timp@redhat.com\n- automated rebuild\n\n[1.6.7-5]\n- fix the stripped binary.\n- use the appropriate macros.\n\n* Sun May 26 2002 Tim Powers timp@redhat.com\n- automated rebuild\n\n[1.6.7-3]\n- ruby-1.6.7-libobj.patch: applied to fix autoconf2.53 error.\n\n[1.6.7-2]\n- ruby-man-1.4.6-jp.tar.bz2: removed.\n- ruby-refm-rdp-1.4.7-ja-html.tar.bz2: uses it instead of.\n- ruby-1.6.7-500-marshal-proc.patch, ruby-1.6.7-501-class-var.patch:\n  removed.\n- ruby-1.6.7-100.patch: applied a bug fix patch.\n  (ruby-dev#16274: patch for 'wm state')\n  (PR#206ja: SEGV handle EXIT)\n- ruby-1.6.7-101.patch: applied a bug fix patch.\n  (ruby-list#34313: singleton should not be Marshal.dump'ed)\n  (ruby-dev#16411: block local var)\n- ruby-1.6.7-102.patch: applied a bug fix patch.\n  (handling multibyte chars is partially broken)\n- ruby-1.6.7-103.patch: applied a bug fix patch.\n  (ruby-dev#16462: preserve reference for GC, but link should be cut)\n\n[1.6.7-1]\n- New upstream release.\n- ruby-1.6.6-100.patch, ruby-1.6.6-501-ruby-mode.patch:\n  removed. these patches no longer should be needed.\n- ruby-1.6.7-500-marshal-proc.patch: applied a fix patch.\n  (ruby-dev#16178: Marshal::dump should call Proc#call.)\n- ruby-1.6.7-501-class-var.patch: applied a fix patch.\n  (ruby-talk#35157: class vars broken in 1.6.7)\n\n[1.6.6-5]\n- Disable alpha because nothing is xemacs for alpha now.\n\n[1.6.6-3]\n- Fixed the duplicate files.\n\n[1.6.6-2]\n- Fixed the missing %defattr\n\n[1.6.6-1]\n- New upstream release.\n- Applied bug fix patches:\n  - ruby-1.6.6-501-ruby-mode.patch: ruby-talk#30479: disables font-lock\n    coloring.\n  - ruby-1.6.6-100.patch: ruby-talk#30203: Ruby 1.6.6 bug and fix\n                          ruby-list#33047: regex bug\n                          PR#230: problem with -d in 1.6.6\n- Added ruby-mode and ruby-mode-xemacs packages.\n- Ruby works fine for ia64. so re-enable to build with ia64.\n  (probably it should be worked for alpha)\n\n* Wed Jan 09 2002 Tim Powers timp@redhat.com\n- automated rebuild\n\n[1.6.4-2]\n- Remove Japanese description and summaries; they belong in specspo and\n  break rpm\n- Clean up specfile\n- Mark language specific files (README.jp) as such\n- bzip2 sources\n- rename the libruby package to ruby-libs for consistency\n- Exclude ia64 (doesn't build - the code doesn't seem to be 64-bit clean\n  [has been excluded on alpha forever])\n\n[1.6.4-1]\n- rebuild for Red Hat 7.2\n\n* Mon Jun 04 2001 akira yamada akira@vinelinux.org\n- upgrade to nwe upstream version 1.6.4.\n\n* Mon Apr 02 2001 akira yamada akira@vinelinux.org\n- applied patch:\n  - fixed method cache bug. etc. (Patch103, Patch104)\n\n* Tue Mar 27 2001 akira yamada akira@vinelinux.org\n- applied patch:\n  - fixed marshal for bignum bug.\n  - fixed scope of constant variables bug.\n\n* Tue Mar 20 2001 akira yamada akira@vinelinux.org\n- upgraded to new upstream version 1.6.3.\n\n* Fri Feb 09 2001 akira yamada akira@vinelinux.org\n- fixed bad group for libruby.\n- Applied patch: upgraded to cvs version (2001-02-08):\n  fixed minor bugs.\n\n* Thu Jan 18 2001 akira yamada akira@vinelinux.org\n- Applied patch: upgraded to cvs version (2001-01-15):\n  fixed minor bugs(e.g. ruby makes extention librares too large...).\n\n* Wed Jan 10 2001 akira yamada akira@vinelinux.org\n- Applied patch: upgraded to cvs version (2001-01-09):\n  fixed minor bugs.\n\n* Sat Dec 30 2000 akira yamada akira@vinelinux.org\n- Applied bug fix patch.\n\n* Mon Dec 25 2000 akira yamada akira@vinelinux.org\n- Updated to new upstream version 1.6.2.\n\n* Fri Dec 22 2000 akira yamada akira@vinelinux.org\n- Removed ruby_cvs.2000122019.patch, added ruby_cvs.2000122215.patch\n  (upgraded ruby to latest cvs version, 1.6.2-preview4).\n\n* Wed Dec 20 2000 akira yamada akira@vinelinux.org\n- Removed ruby_cvs.2000121413.patch, added ruby_cvs.2000122019.patch\n  (upgraded ruby to latest cvs version).\n- new package: libruby\n\n* Thu Dec 14 2000 akira yamada akira@vinelinux.org\n- Removed ruby_cvs.2000101901.patch, added ruby_cvs.2000121413.patch\n  (upgraded ruby to latest cvs version).\n- Removed ruby-dev.11262.patch, ruby-dev.11265.patch,\n  and ruby-dev.11268.patch (included into above patch).\n\n[1.6.1-0vl9]\n- build on gcc-2.95.3\n\n* Thu Oct 19 2000 akira yamada akira@vinelinux.org\n- Added ruby-dev.11268.patch.\n\n* Thu Oct 19 2000 akira yamada akira@vinelinux.org\n- Removed ruby_cvs.2000101117.patch and added ruby_cvs.2000101901.patch\n  (upgraded ruby to latest cvs version).\n- Added ruby-dev.11262.patch.\n- Added ruby-dev.11265.patch.\n\n* Wed Oct 11 2000 akira yamada akira@vinelinux.org\n- Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000101117.patch\n  (upgraded ruby to latest cvs version).\n\n* Mon Oct 09 2000 akira yamada akira@vinelinux.org\n- Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000100313.patch\n  (upgraded ruby to latest cvs version).\n\n* Tue Oct 03 2000 akira yamada akira@vinelinux.org\n- Removed ruby_cvs.2000100218.patch and added ruby_cvs.2000100313.patch\n  (upgraded ruby to latest cvs version).\n\n* Mon Oct 02 2000 akira yamada akira@vinelinux.org\n- Removed ruby_cvs.2000092718.patch and added ruby_cvs.2000100218.patch\n  (upgraded ruby to latest cvs version).\n\n* Wed Sep 27 2000 akira yamada akira@vinelinux.org\n- Updated to upstream version 1.6.1.\n- Removed ruby_cvs.2000082901.patch and added ruby_cvs.2000092718.patch\n  (upgraded ruby to latest cvs version).\n\n* Tue Aug 29 2000 akira yamada akira@redhat.com\n- Updated to version 1.4.6.\n- removed ruby-dev.10123.patch(included into ruby-1.4.6).\n- Added ruby_cvs.2000082901.patch(upgraded ruby to latest cvs version).\n\n* Tue Jun 27 2000 akira yamada akira@redhat.com\n- Updated manuals to version 1.4.5.\n\n* Sun Jun 25 2000 akira yamada akira@redhat.com\n- Added ruby-dev.10123.patch.\n\n* Sat Jun 24 2000 akira yamada akira@redhat.com\n- Updated to version 1.4.5.\n- Removed ruby_cvs.2000062401.patch(included into ruby-1.4.5).\n\n* Thu Jun 22 2000 akira yamada akira@redhat.com\n- Updated to version 1.4.4(06/22/2000 CVS).\n- Removed ruby-dev.10054.patch(included into ruby_cvs.patch).\n\n* Thu Jun 22 2000 akira yamada akira@redhat.com\n- Renamed to ruby_cvs20000620.patch from ruby_cvs.patch.\n\n* Tue Jun 20 2000 akira yamada akira@redhat.com\n- Updated to version 1.4.4(06/20/2000 CVS).\n- Removed ruby-list.23190.patch(included into ruby_cvs.patch).\n- Added ruby-dev.10054.patch.\n\n* Thu Jun 15 2000 akira yamada akira@redhat.com\n- Updated to version 1.4.4(06/12/2000 CVS).\n- Added manuals and FAQs.\n- Split into ruby, ruby-devel, ruby-tcltk, ruby-docs, irb.\n\n* Tue Jun 13 2000 Mitsuo Hamada mhamada@redhat.com\n- Updated to version 1.4.4\n\n* Wed Dec 08 1999 Atsushi Yamagata yamagata@plathome.co.jp\n- Updated to version 1.4.3\n\n* Mon Sep 20 1999 Atsushi Yamagata yamagata@plathome.co.jp\n- Updated to version 1.4.2 (Sep 18)\n\n* Fri Sep 17 1999 Atsushi Yamagata yamagata@plathome.co.jp\n- Updated to version 1.4.2\n\n* Tue Aug 17 1999 Atsushi Yamagata yamagata@plathome.co.jp\n- Updated to version 1.4.0\n\n* Fri Jul 23 1999 Atsushi Yamagata yamagata@plathome.co.jp\n- 2nd release\n- Updated to version 1.2.6(15 Jul 1999)\n- striped %{prefix}/bin/ruby\n\n* Mon Jun 28 1999 Atsushi Yamagata yamagata@plathome.co.jp\n- Updated to version 1.2.6(21 Jun 1999)\n\n* Wed Apr 14 1999 Atsushi Yamagata yamagata@plathome.co.jp\n- Updated to version 1.2.5\n\n* Fri Apr 09 1999 Atsushi Yamagata yamagata@plathome.co.jp\n- Updated to version 1.2.4\n\n* Fri Dec 25 1998 Toru Hoshina hoshina@best.com\n- Version up to 1.2 stable.\n\n* Fri Nov 27 1998 Toru Hoshina hoshina@best.com\n- Version up to 1.1c9.\n\n* Thu Nov 19 1998 Toru Hoshina hoshina@best.com\n- Version up to 1.1c8, however it appear short life :-P\n\n* Fri Nov 13 1998 Toru Hoshina hoshina@best.com\n- Version up.\n\n* Tue Sep 22 1998 Toru Hoshina hoshina@best.com\n- To make a libruby.so.\n\n* Mon Sep 21 1998 Toru Hoshina hoshina@best.com\n- Modified SPEC in order to install libruby.a so that it should be used by\n  another ruby entention.\n- 2nd release.\n\n* Mon Mar 09 1998 Shoichi OZAWA shoch@jsdi.or.jp\n- Added a powerPC arch part. Thanks, MURATA Nobuhiro nob@makioka.y-min.or.jp\n\nrubygem-abrt\n[0.4.0-1]\n- Update to abrt 0.4.0.\n  Resolves: rhbz#1842476\n\nrubygem-mysql2\nrubygem-pg\n[1.3.2-1]\n- Update to pg 1.3.2 by merging Fedora rawhide branch (commit: 39bbd1b)\n  Resolves: rhbz#2063772",
  "id": "ELSA-2025-4063",
  "ovalId": "oval:com.oracle.elsa:def:20254063",
  "source": "oracle_linux",
  "title": "ELSA-2025-4063:  ruby:3.1 security update (MODERATE)",
  "url": "https://linux.oracle.com/errata/ELSA-2025-4063.html"
}