Commit Graph

17 Commits

Author SHA1 Message Date
jeremy
ca6441521a Backport fix for CVE-2009-5147 and CVE-2015-7551 from r23405 2015-12-18 17:36:31 +00:00
kili
43b94b803a Fix build after SSLv3 removal.
ok sthen@
2015-08-27 15:55:04 +00:00
jeremy
a44254e568 Add patch to fix overly permissive matching of hostnames, CVE-2015-1855. 2015-04-15 21:58:16 +00:00
jeremy
2643f8a1b3 Backport security fix for CVE-2014-8090
While here, remove previously backported patch that was already handled
upstream.
2014-11-14 17:41:50 +00:00
jeremy
cdabae0a2a Backport security fix for CVE-2014-8080 2014-11-01 04:56:40 +00:00
jeremy
fdb5f3d307 Add patch to fix heap overflow in floating point parser (CVE-2013-4164). 2013-11-24 02:27:08 +00:00
jeremy
b994145ade Update to ruby 1.8.7-p374, fixing CVE-2013-4073, with an extra patch
to fix a regression.  This will probably be the last official
release of ruby 1.8, since it is now completely unsupported upstream.
2013-07-17 15:48:25 +00:00
jeremy
d8416fa81d Backport security fix from ruby developer Shugo Maeda, similar to
SVN revision 37068.

OK jasper@
2012-10-08 13:15:17 +00:00
jeremy
ccb66ed2cc Fix a backport of a patch that never made it to ruby 1.8.7, which left
out the definition of a new function added in the patch.  Allows usage
of the ruby 1.8 socket extension with LD_BIND_NOW=1.

OK naddy@
2012-09-18 16:02:53 +00:00
jeremy
88c8137132 Update to ruby 1.8.7-p370.
One of our local patches for a security fix was applied upstream, so
remove that patch.
2012-07-03 19:58:39 +00:00
ajacoutot
a89a75cd04 Garbage collect the /dev/arandom patches.
from Brad
ok landry@ sthen@
2012-03-08 12:13:00 +00:00
jeremy
ae714b5407 Add no_ri_docs PSUEDO_FLAVOR to skip building the ri documentation,
which should allow building on arches without enough memory to
generate the ri files.  Also, set PKG_ARCH=* for the ri_docs
subpackage, so that such arches can still use the documentation,
idea from sthen@. Original idea for PSUEDO_FLAVOR from phessler@.

OK sthen@
2011-11-15 00:04:15 +00:00
jeremy
9fe80155bd Override the arch setting to remove OpenBSD version from it,
so ports don't have to be bumped when OpenBSD version changes.

OK landry@, jcs@
2011-07-19 17:06:39 +00:00
jasper
ff90d9b257 Security fix for CVE-2011-0188
Ruby BigDecimal Integer Truncation Vulnerability

Fix from upstream svn. Only 64-bit hosts are affected.

ok jeremy@ (MAINTAINER)
2011-05-25 18:20:43 +00:00
jasper
17243e0941 regen patches 2011-05-25 17:50:45 +00:00
jeremy
71ecdc8e96 Modify FileUtils.mkdir_p to behave more like mkdir(1) -p. Instead of
attempting to create all intermediate directories and rescuing failures,
don't attempt to create directories that already exist.  Fixes systrace
warnings when building ruby ports.

ok landry
2010-10-12 15:39:06 +00:00
jeremy
3a030020ea Split the lang/ruby port into separate ports for ruby 1.8 and ruby
1.9, similar to how the lang/python ports are handled.  ruby 1.8
now installs as ruby18 and ruby 1.9 installs as ruby19.  The
included MESSAGE files for both ports let you know the symlinks to
set up if you want to make that version the default system ruby.

Split port originally started by bernd@, many changes since by me,
help and support from jcs@, landry@, jasper@, and sthen@.

This causes a large amount of fallout in dependent ruby ports,
which will be committed shortly.

OK jcs@, landry@, jasper@, sthen@
2010-09-23 21:58:50 +00:00