aboutsummaryrefslogtreecommitdiff
path: root/lang/ruby
Commit message (Collapse)AuthorAge
* ruby: update to 2.6.2Luiz Angelo Daros de Luca2019-03-18
| | | | | | | | | | | | | Bug fixes and a security update of the bundled RubyGems: CVE-2019-8320: Delete directory using symlink when decompressing tar CVE-2019-8321: Escape sequence injection vulnerability in verbose CVE-2019-8322: Escape sequence injection vulnerability in gem owner CVE-2019-8323: Escape sequence injection vulnerability in API response handling CVE-2019-8324: Installing a malicious gem may lead to arbitrary code execution CVE-2019-8325: Escape sequence injection vulnerability in errors Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: bump to 2.6.1Luiz Angelo Daros de Luca2019-02-20
| | | | | | | | | | | | | | | | | See: https://www.ruby-lang.org/en/news/2019/01/30/ruby-2-6-1-released/ See: https://www.ruby-lang.org/en/news/2018/12/25/ruby-2-6-0-released/ New packages mirroring upstream gemification of ruby: * ruby-bundler (new) * ruby-e2mmap and ruby-ostruct (from ruby-misc) * ruby-forwardable (from ruby-patterns) * ruby-matrix and ruby-prime (from removed ruby-math) * ruby-mutex_m, ruby-sync and ruby-thwait (from ruby-multithread) * ruby-tracer (from ruby-debuglib) Added ruby-dev for building extension inside openwrt (requires cc) Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: fix build for uclibcLuiz Angelo Daros de Luca2019-02-12
| | | | | | Backporting upstream fix. Closes #8051. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: bump to 2.5.3Luiz Angelo Daros de Luca2018-10-22
| | | | | | | | | | Fix only release, including: * CVE-2018-16396: Tainted flags are not propagated in Array#pack and String#unpack with some directives * CVE-2018-16395: OpenSSL::X509::Name equality check does not work correctly Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: add PKG_CPE_ID idLuiz Angelo Daros de Luca2018-08-26
| | | | Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: bump to 2.5.1Luiz Angelo Daros de Luca2018-03-29
| | | | | | | | | | | | | | | | This release includes some bug fixes and some security fixes. * CVE-2017-17742: HTTP response splitting in WEBrick * CVE-2018-6914: Unintentional file and directory creation with directory traversal in tempfile and tmpdir * CVE-2018-8777: DoS by large request in WEBrick * CVE-2018-8778: Buffer under-read in String#unpack * CVE-2018-8779: Unintentional socket creation by poisoned NUL byte in UNIXServer and UNIXSocket * CVE-2018-8780: Unintentional directory traversal by poisoned NUL byte in Dir * Multiple vulnerabilities in RubyGems There are also some bug fixes. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: bump to 2.5.0Luiz Angelo Daros de Luca2018-01-05
| | | | | | | | | | | | | | | | | | | | | 2.5.0 introduces many new features and performance improvements. See: https://www.ruby-lang.org/en/news/2017/12/25/ruby-2-5-0-released/ Packaging changes: * As date was promoted into a gem, ruby-datetime was splitted into ruby-date and ruby-time * New packages for gemified stdlib files: - ruby-cmath (from ruby-math) - ruby-date (from ruby-datetime) - ruby-etc (from ruby-misc) - ruby-fcntl (from ruby-misc) - ruby-fileutils (from ruby-filelib) - ruby-ipaddr (from ruby-socket) - ruby-scanf (from ruby-misc) - ruby-stringio (from ruby-misc) - ruby-strscan (from ruby-misc) Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: bump to 2.4.3Luiz Angelo Daros de Luca2017-12-23
| | | | | | | | This release includes some bug fixes and a security fix. CVE-2017-17405: Command injection vulnerability in Net::FTP Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: bump to 2.4.2Luiz Angelo Daros de Luca2017-09-20
| | | | | | | | | | | | | | | This release contains some security fixes. CVE-2017-0898: Buffer underrun vulnerability in Kernel.sprintf CVE-2017-10784: Escape sequence injection vulnerability in the Basic authentication of WEBrick CVE-2017-14033: Buffer underrun vulnerability in OpenSSL ASN1 decode CVE-2017-14064: Heap exposure in generating JSON Multiple vulnerabilities in RubyGems Update bundled libyaml to version 0.1.7. And many other bugfix. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: change source to .xzLuiz Angelo Daros de Luca2017-03-27
| | | | | | It will save about 2M of download. Thanks @diizzyy. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: bump to 2.4.1Luiz Angelo Daros de Luca2017-03-23
| | | | | | | This releases contains only bug and security fixes, mostly backported from devel branch. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: derive ABI version from VERSIONLuiz Angelo Daros de Luca2017-01-17
| | | | | | | | | There might be no ABI breakage when the first two number of version are the same. (No change on generated packages. No need to bumb release) Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* treewide: replace $(STAGING_DIR)/host and $(HOST_BUILD_PREFIX) with ↵Matthias Schiffer2017-01-10
| | | | | | | | | | | | | | | | | | $(STAGING_DIR_HOSTPKG) As both LEDE and OpenWrt have STAGING_DIR_HOSTPKG now, we can start to rely on it. See 73b7f55424de52d8179a9ad808252fe3bf8dcc9d for more information on STAGING_DIR_HOSTPKG. STAGING_DIR_HOSTPKG won't actually be changed before the first LEDE release (it is equivalent to $(STAGING_DIR)/host), so this simple search/replace cleanup is safe to apply. Doing this cleanup now will be useful for the Gluon project (an OpenWrt/LEDE based firmware framework) for experimenting with modifying STAGING_DIR_HOSTPKG before doing this in the LEDE upstream. Also fixes a typo in the dbus Makefile ("STAGIND_DIR"). Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* ruby: bump to 2.4.0Luiz Angelo Daros de Luca2016-12-31
| | | | | | | | | | | | | | | | | | | This is a stable feature release. Notable changes: - Introduce hash table improvement (by Vladimir Makarov) - Binding#irb: Start a REPL session similar to binding.pry - Unify Fixnum and Bignum into Integer - String supports Unicode case mappings - Performance improvements - Thread#report_on_exception and Thread.report_on_exception changes - Thread deadlock detection now shows threads with their backtrace and dependency - Support OpenSSL 1.1.0 (drop support for 0.9.7 or prior) - ext/tk is now removed from stdlib Feature #8539 - XMLRPC is now removed from stdlib Feature #12160 Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: bump to 2.3.3Luiz Angelo Daros de Luca2016-11-22
| | | | | | | | | This release contains a bug fix about Refinements and Module#prepend. The mixture use of Module#refine and Module#prepend to the same Class could cause unexpected NoMethodError. This is a regression on Ruby 2.3.2 released last week. See [Bug #12920] for details. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: bump to 2.3.2Luiz Angelo Daros de Luca2016-11-18
| | | | | | | | | This release contains update of RubyGems 2.5.2 and update of included ssl certificates. There are many bugfixes too. See the http://svn.ruby-lang.org/repos/ruby/tags/v2_3_2/ChangeLog for details. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: updated to 2.3.1Luiz Angelo Daros de Luca2016-05-01
| | | | Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* lang/ruby: Fix typos (found by codespell)Stefan Weil2016-04-09
| | | | Signed-off-by: Stefan Weil <sw@weilnetz.de>
* ruby: bump to 2.3.0Luiz Angelo Daros de Luca2016-03-06
| | | | | | | | | | | New feature release for ruby.More info: https://www.ruby-lang.org/en/news/2015/12/25/ruby-2-3-0-released/ Patches changes: (-) 001-rdoc-remove_gems_dep.patch was merged (+) 001-acinclude.m4_rename_aclocal.m4.patch backported from upstream. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: refactor package to use more macrosLuiz Angelo Daros de Luca2016-02-14
| | | | | | | | | | | | ruby subpackages now are generated by a macro. This reduces the Makefile size by half and the chance of errors. No change in packages contents, install-size or dependencies, except for some removed doc files. Improved ruby_missingfiles and ruby_find_pkgsdeps script Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: bump to 2.2.4Luiz Angelo Daros de Luca2015-12-22
| | | | | | | | | | | | | | This release includes a security fix for Fiddle extension. * CVE-2015-7551: Unsafe tainted string usage in Fiddle and DL There are also some bugfixes. In package, now LD_FLAGS is copied to DLD_FLAGS (used by ruby for libraries). The missing values from LD_FLAGS cause build error when gcc does not implicitly include staging/usr/lib. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: bump version to 2.2.3Luiz Angelo Daros de Luca2015-08-19
| | | | | | | | | | This is a bug and security fix release, including: - CVE-2015-3900 Request hijacking vulnerability in RubyGems 2.4.6 and earlier http://svn.ruby-lang.org/repos/ruby/tags/v2_2_3/ChangeLog Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: respect IPv6 settingsAlexander Ryzhov2015-05-21
| | | | Signed-off-by: Alexander Ryzhov <openwrt@ryzhov-al.ru>
* ruby: fix build when libyaml is presentLuiz Angelo Daros de Luca2015-04-27
| | | | | | | | | | | | | | | | | | libyaml is an optional dep for ruby psych. When missing, it uses a bundled version of yaml. However, when libyaml is present in openwrt build, ruby-psych packaging failed with deps not declared. Now libyaml is configured as a hard dep for ruby-psych. Also, the tk module was disabled in order to avoid a possible similar problem if tk+x11 is provided in openwrt build. It was currently not build because of missing deps. Other minor changes: - win32* modules where disabled (avoid err msg, no compile changes) - Some files where removed in 2.2.x (like gserver.rb). They were already not packaged but generates a build warning message. Now removed from install. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: bump to 2.2.2Luiz Angelo Daros de Luca2015-04-18
| | | | | | | This is a small ruby release, mainly to fix CVE-2015-1855: Ruby OpenSSL Hostname Verification Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: update to 2.2.1Luiz Angelo Daros de Luca2015-03-03
| | | | | | | | | For ruby changes since 2.2.0: http://svn.ruby-lang.org/repos/ruby/tags/v2_2_1/ChangeLog No relevant changes for OpenWRT. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: update to 2.2.0Luiz Angelo Daros de Luca2015-01-16
| | | | | | | | | | | | | | | | | | | | | | | For ruby changes since 2.1.x: https://github.com/ruby/ruby/blob/v2_2_0/NEWS Relevant changes for OpenWRT: * all patches for ruby-core where merged upstream and they are not needed anymore (only rdoc patch remains) - PR for the rdoc github project was added to the patch header (https://github.com/rdoc/rdoc/pull/340) * new package ruby-powerassert for introduced new bundled gem power_assert * new package ruby-unicodenormalize for Unicode normalization files * removed ruby-dl as DL was removed after being deprecated * ruby-{minitest,testunit} where removed from ruby library. Now they are bundled gems * test and sample files where removed from gems in order to save resources and reduce pkgs dependencies * script ruby_find_pkgsdeps was updated to match upstream changes Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: update to 2.1.5Luiz Angelo Daros de Luca2014-12-14
| | | | | | | | | | | | | Ruby 2.1.5 has been released. This release includes a security fix for a DoS vulnerability of REXML. It is similar to the fixed vulnerability in the previous release, but new and different from it. CVE-2014-8090: Another Denial of Service XML Expansion And, some bug fixes are also included. See tickets and ChangeLog for details. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* misc: correct typo in Makefiles for PKG_LICENSE_FILESIan Leonard2014-11-24
| | | | Signed-off-by: Ian Leonard <antonlacon@gmail.com>
* ruby: update to 2.1.4Luiz Angelo Daros de Luca2014-11-05
| | | | | | | | | | | | | This release includes security fixes for the following vulnerabilities: * CVE-2014-8080: Denial of Service XML Expansion * Changed default settings of ext/openssl related to CVE-2014-3566 And there are some bug-fixes. Ref: https://www.ruby-lang.org/en/news/2014/10/27/ruby-2-1-4-released/ Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: reorder subpackages (alphabetical order)Luiz Angelo Daros de Luca2014-10-07
| | | | Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: adds help text for pkgsLuiz Angelo Daros de Luca2014-10-07
| | | | Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: update to 2.1.3Luiz Angelo Daros de Luca2014-10-07
| | | | Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: explode ruby-core into subpkgsLuiz Angelo Daros de Luca2014-10-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ruby-core is problematic as it is too big. It is impossible to fix pkgs dependencies as ruby-core would generate multiple cycled dependencies between packages. Also, "core" in ruby context means "classes that does not need a 'require'". This is not the case of ruby-core classes. They are, actually, a subset of Ruby Standard Library. In every detected case where a portion of ruby-core could be isolated and save another pkgs from requiring all ruby-core where spin-off into a new subset. Also, big portions of ruby-core, not require by current ruby-* pkgs where spin-off in new pkgs. The remaining of ruby-core was put into a new ruby-misc. ruby-stdlib was created as a meta package that requires all ruby packages that are part of Ruby Standard Library. For a full Ruby Standard Library, just install ruby-stdlib and its deps. Created pkgs from ruby-stdlib: - ruby-misc - ruby-csv - ruby-datetime - ruby-dbm - ruby-debuglib - ruby-drb - ruby-fiddle - ruby-filelib - ruby-logger - ruby-math - ruby-multithread - ruby-mkmf - ruby-net - ruby-optparse - ruby-patterns - ruby-prettyprint - ruby-pstore - ruby-racc - ruby-rbconfig - ruby-rinda - ruby-ripper - ruby-sdbm - ruby-shell - ruby-socket - ruby-uri Some files from ruby-openssl where moved to new subpkgs (as ruby-net and ruby-drb). All dependencies where redefined based on auxiliar script ruby_find_pkgsdeps Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: move files to ruby-xmlrpc,ruby-dl left in ruby-coreLuiz Angelo Daros de Luca2014-10-07
| | | | | | | Some files that belong to other subpkgs where still in ruby-core. Just moved them to the correct place. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: create subpkgs ruby-enc-extra from ruby-encLuiz Angelo Daros de Luca2014-10-07
| | | | | | | | | | Ruby encoding library was too big and bring unecessary encodings for a simple ruby usage. All not directly required encodings from stdlib where moved to ruby-enc-extra. Created pkg from ruby-enc - ruby-enc-extra (from ruby-enc) Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: add auxiliar scripts in order to help testsLuiz Angelo Daros de Luca2014-10-07
| | | | | | | | | | | | | ruby_find_pkgsdeps: look for file dependencies (checks require and Encoding references) and extrapolate it to pkgs deps. Also checks whether a dep is redundant or missing in pkgs. Must run inside an OpenWRT with all ruby* pkgs installed. ruby_missingfiles: list files in staging/target and from files comparing side by side its contents. It helps to easly visualize which file is not packaged in an ipk. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: spin-off ruby-digest from ruby-opensslLuiz Angelo Daros de Luca2014-10-07
| | | | | | | | | | | | | | Digest can use OpenSSL or ruby internal implementation of hash functions. The first uses less disk space but requires openssl, that is relatively big. As internal hash implementations are not too much bigger than openssl version, it is compiled by default. A new config option can change it to use OpenSSL instead. As digest is independent from openssl, ruby-digest was created as a new pkgs. Adds pkgs: - ruby-digest (from ruby-openssl) Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: remove refs from dropped syckLuiz Angelo Daros de Luca2014-10-07
| | | | | | | | | syck was replaced by psych in yaml. (ref: https://bugs.ruby-lang.org/projects/ruby-trunk/repository/revisions/36786) Also add ruby-psych to ruby-yaml deps Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: move gems out of coreLuiz Angelo Daros de Luca2014-10-07
| | | | | | | | | | | | | | | | | | | | | | | | | | Some ruby gems where still in ruby-core pkg. These files where moved outside ruby-core into ruby-gems or their own subpkg. ruby-unit renamed to ruby-testunit as its gem is named test-unit. ruby-rdoc left a file in ruby-core. Psych is a gem and deserves its own subpkg. It replaces syck (used by yaml) on recent ruby version (ref: https://bugs.ruby-lang.org/projects/ruby-trunk/repository/revisions/36786) Also, some psych files where packed incorrecly into ruby-json. The asterisk in */json was intend to match <arch>/json/ and not psych/json. Files where derived from ruby-core and a lost file in ruby-json. New subpkgs: - ruby-bigdecimal - ruby-io-console - ruby-minitest - ruby-psych Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: link ext/digest/* to openssl only when needed, fix rmd160 nameLuiz Angelo Daros de Luca2014-10-07
| | | | | | | | | | | | | ext/digest/rmd160 was referencing a function that never existed in openssl. The name was simply mistyped. Now it can use openssl. openssl was always linked to ext/digest when library is avaiable, even when it was disable by configure option and not used by code. upstream refs: https://bugs.ruby-lang.org/issues/10252 upstream refs: https://bugs.ruby-lang.org/issues/10324 Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: remove minitest deps on gemsLuiz Angelo Daros de Luca2014-10-07
| | | | | | | minitest can live without gems. Just a minor fix to solve a require that fails when gem is missing Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: rdoc can run without gems (with patch)Luiz Angelo Daros de Luca2014-10-07
| | | | | | | | | | rdoc seems to be written to run without gem. However, some internal code still does not check for gems presence. With a small patch, rdoc can run without gems. Ref: https://bugs.ruby-lang.org/issues/10196 Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: wrap script to disable gems if not installedLuiz Angelo Daros de Luca2014-10-07
| | | | | | | | | | | | | | ruby, by default, try to load gems on start. If not present, it fails. As gems brings many deps, this make ruby unsuitable for routers limited resources. ruby can avoid to load gems with the option "--disable-gems". So, a wrap script in the place of /usr/bin/ruby adds this option if gems are not found. Also add vendor/site directories Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: Disable doc generationLuiz Angelo Daros de Luca2014-10-07
| | | | | | | | | Docs are not currently packaged. So, there is no need to install them. Also, doxygen have some problem with the usaged of git in build_dir as it takes ages running git commands on every file. Disabling the docs reduces the compilation time. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: remove ruby-ncursesLuiz Angelo Daros de Luca2014-10-07
| | | | | | | | ruby-ncurses where removed from ruby upstream (ruby commit 9c5b2fd8aa0fd343ad094d47a638cfd3f6ae0a81) and become solely a gem now. OpenWRT subpackage removed. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: fix ruby/host buildNicolas Thill2014-08-20
| | | | | | | - build ruby/host extensions as static, - remove dependency on gmp/host Signed-off-by: Nicolas Thill <nico@openwrt.org>
* ruby: Fix build dependency of gmp/hostLuiz Angelo Daros de Luca2014-08-20
| | | | | | | | | | libgmp.so is needed for miniruby, that is compiled in host. Using PKG_BUILD_DEPENDS=gmp/host eventually compiled gmp/host before ruby/host. However, when this did not happened, build failed. Using HOST_BUILD_DEPENDS=gmp/host seems to be the correct way to require it. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* ruby: import from oldpackages and update to 2.1.2Luiz Angelo Daros de Luca2014-08-17
This commit imports the old Makefile from old openwrt feeds. Also, the package was updated to the latest version. The new version was tested in a VM with no aparent problem. No patches are needed. I added myself as maintainer. If possible, I would like to gain commit access. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
Powered by cgit, Themed by Ted Yin.