buildroot/package/ruby, branch 2018.02

ruby: security bump to version 2.4.2

2017-11-12T16:52:28+00:00

Fixed the following security issues: CVE-2017-0898: Buffer underrun vulnerability in Kernel.sprintf CVE-2017-10784: Escape sequence injection vulnerability in the Basic authentication of WEBrick CVE-2017-14033: Buffer underrun vulnerability in OpenSSL ASN1 decode CVE-2017-14064: Heap exposure in generating JSON For more details, see the release notes: https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-4-2-released/ Drop now upstreamed rubygems patches and add hashes for the license files while we're at it. Signed-off-by: Peter Korsgaard

ruby: add upstream security patches bumping rubygems to 2.6.13

2017-09-09T20:44:00+00:00

We unfortunately cannot use the upstream patches directly as they are not in 'patch -p1' format, so convert them and include instead. Fixes: CVE-2017-0899 - RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences. CVE-2017-0900 - RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who have issued a `query` command. CVE-2017-0901 - RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem. CVE-2017-0902 - RubyGems version 2.6.12 and earlier is vulnerable to a DNS hijacking vulnerability that allows a MITM attacker to force the RubyGems client to download and install gems from a server that the attacker controls. For more details, see https://www.ruby-lang.org/en/news/2017/08/29/multiple-vulnerabilities-in-rubygems/ Signed-off-by: Peter Korsgaard Signed-off-by: Thomas Petazzoni

boot, package: use SPDX short identifier for BSD-2c

2017-04-01T13:27:05+00:00

We want to use SPDX identifier for license string as much as possible. SPDX short identifier for BSD-2c is BSD-2-Clause. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/BSD-2c/BSD-2-Clause/g' Signed-off-by: Rahul Bedarkar Signed-off-by: Thomas Petazzoni

boot, package: use SPDX short identifier for BSD-3c

2017-04-01T13:26:57+00:00

We want to use SPDX identifier for license string as much as possible. SPDX short identifier for BSD-3c is BSD-3-Clause. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/BSD-3c/BSD-3-Clause/g' Signed-off-by: Rahul Bedarkar Signed-off-by: Thomas Petazzoni

ruby: bump version to 2.4.1

2017-03-22T22:12:29+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni

ruby: assume we always have finite, isinf and isnan for uClibc

2017-02-07T10:46:52+00:00

On uClibc, finite, isinf and isnan are not directly implemented as functions. Instead math.h #define's these to __finite, __isinf and __isnan, which are real functions. This confuses the Ruby configure script which use AC_REPLACE_FUNCS to detect these, as it really checks for a function without including math.h. Because of the naming difference the checks fail, therefore the symbols HAVE_FINITE, HAVE_ISINF and HAVE_ISNAN are not defined. Ruby code relies on those symbols in order to define its own version of the finite, isinf and isnan functions. Since the symbols haven't been defined, those definitions cause conflicts with the already-existing functions. Fixes: http://autobuild.buildroot.net/results/f34/f34dc20749c6f6d12c51eddf3ee6c2ef41d7c13d/ [Peter: extend description, add comment in .mk] Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

ruby: bump version to 2.4.0

2017-01-13T15:19:02+00:00

The problem addressed by 0001 patch has been fixed upstream and is that fix is included in this release: https://github.com/ruby/ruby/commit/aa107497cd379b713eba8cecdb9a882bb1e0dd89 Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

ruby: bump version to 2.3.3

2016-11-21T20:14:36+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni

ruby: bump version to 2.3.2

2016-11-15T21:48:46+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni

arch: remove support for sh64

2016-09-08T20:15:15+00:00

It's been deprecated for quite some time now. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni