# changelog

author: jengelh@medozas.de
changelog:
  - package documentation as noarch
  - adjust ruby.macros to ask the ruby binary for the target plaform.
    This is because %_host_cpu can expand to sparc64, while ruby is
    built for the sparcv9 target, and %_target_cpu can expand to
    noarch.
  - in ruby.spec, %rb_arch is statically reset to %_target_cpu, as
    we need the target name. Since it won't be noarch in this case,
    that is good.


author: mrueckert@suse.de
changelog:
  - update to 1.8.7p249
    small big fix release in the 1.8.7 branch, this includes the fix
    for:
    - ruby webrick doesn't sanitize non-printable characters in log
      (bnc#570616) CVE-2009-4492
  - drop ruby-1.8.6.p36_gc.patch: solution is upstream


author: mrueckert@suse.de
changelog:
  - added ruby-1.8.x_digest_non_void_return.patch:
    patch pulled from SVN to fix the warnings about no return in
    non-void functions.


author: mrueckert@suse.de
changelog:
  - added ruby-1.8.x_openssl-1.0.patch and
    ruby-1.8.x_openssl-1.0-tests.patch:
    fix building with openssl 1.0.0 (taken from svn)
  - added ruby-1.8.x_yaml2byte.patch:
    fix warning about sequence point
  - remove requires on glibc-devel again


author: mrueckert@suse.de
changelog:
  - fix build on ix86:
    - -target got removed from the %configure macro. add it back
    locally for now.


author: mrueckert@suse.de
changelog:
  - update to 1.8.7.p299 (bnc#606056 and bnc#603914)
    - OpenSSL 1.0.0 support
    - Use OpenSSL engines which exist
    - Fixed range and chunked support for Net::HTTP
    - Iconv fixes
    - Backported pack/unpack from the 1.9 branch (bnc#606056 bnc#603914)
    - Multiple fixes in the resolver
    - Fixed Unicode inspection bug.
    - Escape characters properly for the accesslog (bnc#570616)
  - cleaned up rpmlintrc
  - refreshed patches:
    old: ruby-1.8.7.p22_lib64.patch
    new: ruby-1.8.7.p299_lib64.patch
    old: ruby_1.8.6.p36_date_remove_privat.patch
    new: ruby-1.8.7.p299_date_remove_privat.patch
    old: ruby-pedantic-headers.diff
    new: ruby-1.8.7.p299_pedantic-headers.patch
  - replaced patches ruby-1.8.x_openssl-1.0.patch and
    ruby-1.8.x_openssl-1.0-tests.patch with
    ruby-1.8.x_openssl_branch_update.patch


author: mrueckert@suse.de
changelog:
  - update to 1.8.7.p334 (bnc#673740, bnc#673750, bnc#600752)
    - A symlink race condition vulnerability was found in
      FileUtils.remove_entry_secure. The vulnerability allows local
      users to delete arbitrary files and directories. CVE-2011-1004
    - Exception#to_s method can be used to trick $SAFE check, which
      makes a untrusted codes to modify arbitrary strings.
      CVE-2011-1005
    - Ruby WEBrick character set issue (XSS) CVE-2010-0541
    for all non security changes see
      /usr/share/doc/packages/ruby/ChangeLog
  - refreshed ruby-1.8.x_openssl_branch_update.patch
  - buildrequires openssl to make the last openssl test work
  - https://github.com/ruby/ruby/commit/1887f60a8540f64f5c7bb14d57c0be70506941b8.patch
    * ext/zlib/zlib.c (zstream_append_input2): add RB_GC_GUARD.
      This caused failure when test/csv is executed with GC.stress =
      true.
  - added ruby-1.8.7.p334_remove_zlib_test_params_test.patch:
    remove the test_params patch from backport in r27917
    It doesnt pass atm.
  - removed ruby-1.8.6.p36_socket_ipv6.patch:
    included upstream


author: mrueckert@suse.de
changelog:
  - added ruby-1.8.x_rubylibdir.patch:
    allows us to also change the path for the stdlib part of the ruby
    directory tree


author: mrueckert@suse.de
changelog:
  - update to 1.8.7.p352
    - support for openssl compiled without SSLv2
    - multilib support for tk build
    - some IPv6 related fixes
    - zlib fixes
    - reinitialize PRNG when forking children
    - uri route_to fixes
    - fix race condition with variables and autoload
  - drop 1887f60a8540f64f5c7bb14d57c0be70506941b8.patch
    included upstream
  - drop ruby-1.8.7.p22_tcltk-multilib.patch
    solved differently upstream


author: mrueckert@suse.de
changelog:
  - update to 1.8.7.p357
    - randomize hash to avoid algorithmic complexity attacks.
      CVE-2011-4815
    - initialization of hash_seed to be at the beginning of the
      process.
    - initialize random seed at first.
    - call OpenSSL::Random.seed at the SecureRandom.random_bytes
      call.  insert separators for array join.  patch by Masahiro
      Tomita.  [ruby-dev:44270]
    - mkconfig.rb: fix for continued lines.  based on a patch from
      Marcus Rueckert <darix AT opensu.se> at [ruby-core:20420].
    - Infinity is greater than any bignum number.  [ruby-dev:38672]
    - initialize store->ex_data.sk.  [ruby-core:28907]
      [ruby-core:23971] [ruby-core:18121]


author: mrueckert@suse.de
changelog:
  - added ruby-1.9.1-preview2_mkconfig_continued_line.patch:
    handle continued lines with empty values


author: mrueckert@suse.de
changelog:
  - add ruby-1.9.1-rc2_gc_64bit_warning.patch
    do not cast a pointer to int
  - add ruby-1.9.1-rc2_rb_time_timeval_prototype.patch
    copy the complete prototype for the function


author: mrueckert@suse.de
changelog:
  - update 1.9.2 p180
  - added ruby-1.9.2p180_tcl_no_stupid_rpaths.patch
    - remove the other path entries that are unneeded on our system
  - dropped ruby-1.9.1-rc2_gc_64bit_warning.patch


author: mrueckert@suse.de
changelog:
  - update 1.9.2 p290
    some important fixes:
    - require 'date'; Date.new === nil throws an undefined method
      error for coerce on p180 - this has now been fixed
    - The Thread.kill segfaults when the object to be killed isn't a
      thread bug has been resolved.
    - Tweaks to reduce segmentation faults when using zlib on x86-64
      Darwin (OS X) - always good
    - Modification to prevent random number sequence repetition on
      forked child processes in SecureRandom
    - Fix to io system to resolve a Windows-only bug where characters
      are being read incorrectly due to ASCII not being treated as 7
      bit
    - A tweak to Psych (the YAML parser) to plug a memory leak
    - Load paths are now always expanded by rb_et_expanded_load_path
      (I think this might yield a performance gain?)
    - Fixes to Psych's treatment and testing of string taint
    - Prevention of temporary objects being garbage collected in some
      cases
    - Fixes to resolve compilation problems with Visual C++ 2010
    - A fix so that Tk's extconf.rb would run successfully
    - Lots of Tk related fixes generally
    - A fix to string parsing to resolve an obscure
      symbol-containing-newlines parsing bug
    for the complete changes see /usr/share/doc/packages/ruby19/ChangeLog
  - refresh tcl rpath patch:
    old ruby-1.9.2p180_tcl_no_stupid_rpaths.patch
    new ruby-1.9.2p290_tcl_no_stupid_rpaths.patch


author: mrueckert@suse.de
changelog:
  - override rb_arch macro from the rpm in the spec file
    rb_arch in rpm is still using host_cpu instead of target_cpu. for
    older distros we will need the override anyway. this allows us to
    reduce the sed part in the marco  to just ppc/powerpc.
  - related to the first change:
    pass --target={_target_platform} to configure (we used to do that
    on 1.8 already)
  - provide unversioned package names
  - rip out bleakhouse support for now to make merging easier
  - install macros file
  - reorder some file list lines to make merging easier
  - use a ruby variable instead of calculating rb_ver in the macros
    file. (more important for 1.8)


author: coolo@suse.com
changelog:
  - update to 1.9.3 p125
    - Fix for Ruby OpenSSL module: Allow "0/n splitting" as a
    prevention for the TLS BEAST attack
    - Fixed: LLVM/clang support [Bug #5076]
    - Fixed: GCC 4.7 support [Bug #5851]
    - other bug fixes


author: coolo@suse.com
changelog:
  - there is no obvious use for the vim buildrequires and it's causing
    a build cycle (because vim really requires ruby) - so remove it


