Hello community, here is the log from the commit of package ruby2.4 for openSUSE:Factory checked in at 2017-12-21 11:28:12 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ruby2.4 (Old) and /work/SRC/openSUSE:Factory/.ruby2.4.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "ruby2.4" Thu Dec 21 11:28:12 2017 rev:4 rq:558616 version:2.4.3 Changes: -------- --- /work/SRC/openSUSE:Factory/ruby2.4/ruby2.4.changes 2017-11-23 09:38:20.709800689 +0100 +++ /work/SRC/openSUSE:Factory/.ruby2.4.new/ruby2.4.changes 2017-12-21 11:28:17.062648123 +0100 @@ -1,0 +2,16 @@ +Tue Dec 19 15:28:01 UTC 2017 - mrueckert@suse.de + +- switch to https urls + +------------------------------------------------------------------- +Mon Dec 18 15:21:31 UTC 2017 - mrueckert@suse.de + +- update to 2.4.3 (boo#1073002) + This release includes some bug fixes and a security fix. + + CVE-2017-17405: Command injection vulnerability in Net::FTP + https://www.ruby-lang.org/en/news/2017/12/14/ruby-2-4-3-released/ +- update the versions for the bundled gem list +- drop configure-2.4.2.diff as it is included upstream + +------------------------------------------------------------------- Old: ---- configure-2.4.2.diff ruby-2.4.2.tar.xz New: ---- ruby-2.4.3.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ruby2.4.spec ++++++ --- /var/tmp/diff_new_pack.6v8CL3/_old 2017-12-21 11:28:17.682617894 +0100 +++ /var/tmp/diff_new_pack.6v8CL3/_new 2017-12-21 11:28:17.686617699 +0100 @@ -25,7 +25,7 @@ #### %define patch_level p0 -Version: 2.4.2 +Version: 2.4.3 Release: 0 # make the exported API version explicit %define api_version 2.4.0 @@ -36,7 +36,7 @@ %define rpm_macros_version 3 # -%define pkg_version 2.4.2 +%define pkg_version 2.4.3 %define libname libruby2_4-2_4 # keep in sync with macro file! %define rb_ver %{api_version} @@ -115,8 +115,8 @@ Requires: ruby-common # -Url: http://www.ruby-lang.org/ -Source: http://cache.ruby-lang.org/pub/ruby/2.4/ruby-%{pkg_version}.tar.xz +Url: https://www.ruby-lang.org/ +Source: https://cache.ruby-lang.org/pub/ruby/2.4/ruby-%{pkg_version}.tar.xz Source1: generate_rubygemprovides.awk # Source2: %{name}.macros @@ -125,7 +125,6 @@ Patch01: 0001-make-gem-build-reproducible.patch Patch02: 0002-gc.c-tick-for-POWER-arch.patch -Patch03: configure-2.4.2.diff # Summary: An Interpreted Object-Oriented Scripting Language @@ -192,14 +191,11 @@ %define gen_embedded_provides4() %(awk -f %{S:1} -- %api_version %arch %1 %2 %3 %4) %define gen_embedded_provides5() %(awk -f %{S:1} -- %api_version %arch %1 %2 %3 %4 %5) -# gemspec %gen_embedded_provides4 bigdecimal 1 3 0 %gen_embedded_provides4 io-console 0 4 6 -%gen_embedded_provides4 json 2 0 2 -%gen_embedded_provides4 openssl 2 0 2 +%gen_embedded_provides4 json 2 0 4 +%gen_embedded_provides4 openssl 2 0 5 %gen_embedded_provides4 psych 2 2 2 -%gen_embedded_provides4 rdoc 5 0 0 -# gems %gen_embedded_provides4 did_you_mean 1 1 0 %gen_embedded_provides4 minitest 5 10 1 %gen_embedded_provides4 net-telnet 0 1 1 @@ -207,6 +203,7 @@ %gen_embedded_provides4 rake 12 0 0 %gen_embedded_provides4 test-unit 3 2 3 %gen_embedded_provides4 xmlrpc 0 2 1 +%gen_embedded_provides4 rdoc 4 1 0 ################################ @@ -304,7 +301,6 @@ %setup -q -n ruby-%{pkg_version} %patch01 -p1 %patch02 -p1 -%patch03 -p1 find sample -type f -print0 | xargs -r0 chmod a-x grep -Erl '^#! */' benchmark bootstraptest ext lib sample test \ | xargs -r perl -p -i -e 's|^#!\s*\S+(\s+.*)?$|#!/usr/bin/ruby%{rb_binary_suffix} $1|' ++++++ ruby-2.4.2.tar.xz -> ruby-2.4.3.tar.xz ++++++ /work/SRC/openSUSE:Factory/ruby2.4/ruby-2.4.2.tar.xz /work/SRC/openSUSE:Factory/.ruby2.4.new/ruby-2.4.3.tar.xz differ: char 26, line 1