cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
127,487 Commits 1 Branch 0 Tags
Commit Graph

367 Commits

Author SHA1 Message Date
jeremy
f374615e17 Update to the latest versions of ruby: 2.5.1, 2.4.4, and 2.3.7. 
This fixes the following CVEs: 2017-17742, 2018-6914, 2018-8777,
2018-8778, 2018-8779, and 2018-8780.

While here, switch HOMEPAGE and MASTER_SITES from http to https,
requested by tj@.
 2018-03-31 21:12:45 +00:00
jeremy
7b3eb6690d Restore missing $OpenBSD$ entry in ri_docs PLIST 
Pointed out by juanfra@
 2018-03-08 15:00:27 +00:00
sthen
23f03b0df4 Better fix. It was actually X509_STORE_get_ex_new_index that we don't 
have, but Ruby was guarding this by a single function check for
X509_STORE_set_ex_data. In most cases they are doing nice checks in
extconf.rb for the exact function so convert to doing the same here.
 2018-02-23 09:54:25 +00:00
sthen
87b689426d quick fix for X509_STORE_set_ex_data to let this package/run; config checking 
sets HAVE_X509_STORE_SET_EX_DATA though we don't actually have it yet, causing
undefined symbol when running ruby as part of "make fake" to generate docs.
 2018-02-22 21:35:11 +00:00
sthen
c8307509d3 unbreak, now we have DH_get0_engine() 2018-02-22 19:36:04 +00:00
jeremy
903b134fc9 Apply upstream patches to fix rubygems security vulnerabilities in 
ruby 2.3, 2.4, and 2.5.
 2018-02-19 02:18:13 +00:00
sthen
24f62d13dc cope with new libressl functions, from jsing 2018-02-18 18:01:02 +00:00
sthen
a534cb5471 regen patch, no other change 2018-02-18 17:53:45 +00:00
jeremy
2d65497162 Move GCC diagnostic pragma outside function call to fix build with GCC 4.2. 
OK landry@
 2018-01-25 14:34:58 +00:00
jeremy
c564a3ccbf Allow use of ruby25 FLAVOR to build ruby 2.5 version of ruby gem ports 
OK jca@
 2018-01-15 23:59:33 +00:00
jeremy
9851a9d4cc Hook ruby 2.5 to the build 2018-01-15 23:58:44 +00:00
jeremy
8b7f661022 Import ruby 2.5.0 
OK jca@
 2018-01-15 23:57:42 +00:00
jeremy
12dbd0fb39 Update to ruby 2.4.3, fixing CVE-2017-17405 and CVE-2017-0903 2017-12-15 16:47:37 +00:00
jeremy
0a67ff4532 Update to ruby 2.3.6, fixing CVE-2017-17405 and CVE-2017-0903 2017-12-15 16:46:52 +00:00
jeremy
bf6889217a Move most shared logic from ruby version-specific Makefiles to Makefile.inc 
Drop the use of RUBYLIBREV, since it is the same as REV since ruby 2.0 and
causes issues with update-plist.

OK tb@
 2017-11-02 10:16:38 +00:00
jeremy
88ca83476b Update DISTNAME in ruby Makefile.inc for newer ruby dist file naming 2017-11-01 10:52:06 +00:00
jeremy
0d435f9083 Remove ruby18.PLIST 
This is not needed now that ruby 1.8 support has been removed.
 2017-11-01 10:09:53 +00:00
jeremy
3b7ec481f8 Switch default ruby version to ruby 2.4 
Also remove ruby 1.8, 2.1, and 2.2 support from ruby.port.mk. This greatly
simplifies a lot of the code.
 2017-11-01 10:09:23 +00:00
jeremy
e3627bfc71 Remove ruby 1.8, 2.1, and 2.2 
All ports that previously required ruby 1.8 have either been removed or
been upgraded to use a newer ruby version or no longer depend on ruby
at all.

Our new ruby support policy is to remove the ruby version if nothing
depends on it 6 months after the version moves from general support
to security-only support upstream.  This applies to both ruby 2.1 and
2.2 currently, so both are being removed.

OK ajacoutot@, sthen@
 2017-11-01 10:05:45 +00:00
jeremy
0c486d2496 Unlink ruby 1.8, 2.1, and 2.2 2017-11-01 10:01:25 +00:00
jeremy
273010916e Backport security fixes from ruby 2.2.8 to ruby 1.8.7. Fixes 
CVE-2017-0898 and CVE-2017-10784.  Regen patches while here.
 2017-09-16 22:54:58 +00:00
jeremy
3edfa2882e Backport security fixes from ruby 2.2.8 to ruby 2.1.9. Fixes 
CVE-2017-14033, CVE-2017-14064, CVE-2017-0898, and CVE-2017-10784.
Regen patches while here.
 2017-09-16 22:52:40 +00:00
jeremy
accc0898b0 Update to ruby 2.2.8. Fixes CVE-2017-14033, CVE-2017-14064, 
CVE-2017-0898, and CVE-2017-10784. Regen patches while here.
 2017-09-16 22:45:26 +00:00
jeremy
2e16c3b2ca Update to ruby 2.3.5. Fixes CVE-2017-14033, CVE-2017-14064, 
CVE-2017-0898, and CVE-2017-10784. Shared lib major bump due to
removed/modified functions.  Regen patches while here.
 2017-09-16 22:43:38 +00:00
jeremy
a5110ece69 Update to ruby 2.4.2. Fixes CVE-2017-14033, CVE-2017-14064, 
CVE-2017-0898, and CVE-2017-10784. Shared lib major bump due to
removed/modified functions.  Regen patches while here.
 2017-09-16 22:42:37 +00:00
jeremy
37eaf6e0da Backport security patch from ruby 2.2 to ruby 2.1. Fixes the following 
security vulnerabilities:

* Fix a DNS request hijacking vulnerability.
* Fix an ANSI escape sequence vulnerability.
* Fix a DOS vulernerability in the query command.
* Fix a vulnerability in the gem installer that allowed a malicious
  gem to overwrite arbitrary files.
 2017-09-02 21:32:07 +00:00
jeremy
c5d902d473 Apply security patches provided by ruby-core to fix security issues 
in rubygems for versions still supported upstream (2.2, 2.3, and 2.4).

No CVE numbers, but this fixes the following vulnerabilities:

* Fix a DNS request hijacking vulnerability.
* Fix an ANSI escape sequence vulnerability.
* Fix a DOS vulernerability in the query command.
* Fix a vulnerability in the gem installer that allowed a malicious
  gem to overwrite arbitrary files.
 2017-09-02 21:29:47 +00:00
ajacoutot
212b011311 Remove trailing lines. 2017-06-12 10:57:57 +00:00
jeremy
a2208beef5 Fix comment for patchfile, no functional change. 2017-04-18 17:09:26 +00:00
jeremy
eedf27a3d2 Fix heap overflow by renaming HEAP_ALIGN_LOG to HEAP_PAGE_ALIGN_LOG in configure. 2017-04-17 18:29:11 +00:00
jeremy
799e944524 Update to ruby 2.3.4 2017-04-07 21:14:17 +00:00
jeremy
f0629c71a6 Update to ruby 2.2.7 2017-04-04 21:40:01 +00:00
jeremy
0043fdaf26 Update to ruby 2.4.1 
Shared lib major bump due to removal of ruby_vm_sysstack_error_copy
function.  Regen patches.
 2017-03-24 14:39:05 +00:00
jca
acf4c4a2f0 Workaround for ram-constrained archs: build ext/ripper/ripper.c with -O1 
Same as lang/ruby/2.3.  Preventively add arm, just in case it is near
the maximum limit.
Prodded by jeremy@ (maintainer)
 2017-02-21 17:04:45 +00:00
jca
b40bb7b3ca Workaround for ram-constrained archs: build ext/ripper/ripper.c with -O1 
ok phessler@ jeremy@ (maintainer)
 2017-02-21 16:45:36 +00:00
jeremy
4443230027 Add support for using ruby 2.4 to ruby.port.mk 
This adds support for FLAVOR=ruby24 to most ruby gem ports, to
allow building of a package for ruby 2.4.

Additionally, refactor ruby.port.mk to reduce duplication and make
future updates simpler.

OK jasper@
 2017-01-06 16:03:54 +00:00
jeremy
8d57e07b31 Hookup ruby 2.4 to the build 2017-01-06 16:00:21 +00:00
jeremy
4fb180cbad Import ruby 2.4.0 
OK jasper@
 2017-01-06 15:59:25 +00:00
phessler
d4ff38167f arm: OOM when building ext/ripper/ripper.c 2016-12-21 07:22:20 +00:00
jeremy
3991a161d8 Update to ruby 2.3.3 2016-11-23 15:59:32 +00:00
jeremy
d76bcdfea3 Update to ruby 2.3.2 
Bump minor due to new exported function.
 2016-11-19 04:56:00 +00:00
jeremy
584364fcdf Update to ruby 2.2.6 
Bump minor due to new exported function.
 2016-11-19 04:55:26 +00:00
jeremy
2ab6141022 Add directory containing gem.build_complete file to ruby gem ext packages 
This is needed so that the packages do not leave around the directories
when they are removed.

This requires bumping all ruby gem ext ports, which will happen shortly.

Problem discovered by pirofti@
 2016-11-04 21:25:10 +00:00
jeremy
6bf61276f8 Add a couple directories to the PLIST 
These directories are needed to that installing a ruby gem ext port and
then remove the ruby package doesn't leave directories around. This is
only a partial fix, the ruby gem ext ports all need a similar fix.

Problem pointed out by and feedback from pirofti@
 2016-11-04 17:03:29 +00:00
jeremy
2e6d02afd2 Send ruby 2.0 to the Attic 
It was unhooked from the build back in September.
 2016-10-31 12:02:49 +00:00
jeremy
07183c6d19 Unhook ruby 2.0 2016-09-06 15:38:41 +00:00
jeremy
e8a4d89481 Make ruby 2.3 the default ruby version. 
Also, remove code allowing the building of ruby ports using ruby 2.0.
 2016-09-06 15:23:26 +00:00
jeremy
dcd3b2292d Remove references to sparc and vax 2016-09-01 14:23:58 +00:00
jasper
003e889c0a retire sparc 2016-09-01 10:53:26 +00:00
jeremy
5a038f445f Add USE_WXNEEDED to ruby, to get devel/ruby-therubyracer working 
Original diff from awolk@, OK sthen@

Change to use USE_WXNEEDED by me
 2016-08-19 19:09:34 +00:00