9 Commits

Author SHA1 Message Date
jeremy
d9fd50f09f Update to Ruby 2.6.6 2020-04-03 01:47:05 +00:00
jeremy
239f38cbff Use more automated debug package creation 2019-11-19 17:20:12 +00:00
jeremy
555f88c968 Build debug packages for ruby 2019-11-10 13:50:00 +00:00
jeremy
f6c2326c22 Update to Ruby 2.6.5, fixing the following vulnerabilities:
* CVE-2019-16255: A code injection vulnerability of Shell#[] and Shell#test
* CVE-2019-16254: HTTP response splitting in WEBrick (Additional fix)
* CVE-2019-15845: A NUL injection vulnerability of File.fnmatch and File.fnmatch?
* CVE-2019-16201: Regular Expression Denial of Service vulnerability of WEBrick.s Digest access authentication
2019-10-03 18:38:54 +00:00
jeremy
10a6a2a44f Update to Ruby 2.6.4
Drop PATCHFILES as the patch is now included.

Backport use of realpath(3) for File.realpath to allow unveil(2) to work.
2019-08-30 15:58:26 +00:00
jeremy
6bb2a9dd70 Update to ruby 2.6.3 2019-04-26 15:46:28 +00:00
jeremy
5245052a1f Update to ruby 2.6.2
Fixes the following vulnerabilities in rubygems:

CVE-2019-8320: Delete directory using symlink when decompressing tar
CVE-2019-8321: Escape sequence injection vulnerability in verbose
CVE-2019-8322: Escape sequence injection vulnerability in gem owner
CVE-2019-8323: Escape sequence injection vulnerability in API response handling
CVE-2019-8324: Installing a malicious gem may lead to arbitrary code execution
CVE-2019-8325: Escape sequence injection vulnerability in errors
2019-03-15 16:44:49 +00:00
jeremy
16da32da5f Update to ruby 2.6.1 2019-02-01 16:24:59 +00:00
jeremy
0d9f363af6 Import ruby 2.6.0
Help and testing from jca@ and George Koehler
OK jca@
2019-01-14 16:13:05 +00:00