[Buildroot] [PATCH] ruby: security bump to version 2.1.4

[Buildroot] [PATCH] ruby: security bump to version 2.1.4

[Gustavo Zacarias]

Fixes:
CVE-2014-8080 - Denial of service XML expansion

And change default ext/openssl settings WRT CVE-2014-3566.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
---
 package/ruby/ruby.hash | 4 ++--
 package/ruby/ruby.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package/ruby/ruby.hash b/package/ruby/ruby.hash
index 3d17e8c..8d5d133 100644
--- a/package/ruby/ruby.hash
+++ b/package/ruby/ruby.hash
@@ -1,2 +1,2 @@
-# From https://www.ruby-lang.org/en/downloads/
-md5	74a37b9ad90e4ea63c0eed32b9d5b18f	ruby-2.1.3.tar.gz
+# From https://www.ruby-lang.org/en/news/2014/10/27/ruby-2-1-4-released/
+sha256	bf9952cdeb3a0c6a5a27745c9b4c0e5e264e92b669b2b08efb363f5156549204	ruby-2.1.4.tar.gz
diff --git a/package/ruby/ruby.mk b/package/ruby/ruby.mk
index e633ee4..36f6d3f 100644
--- a/package/ruby/ruby.mk
+++ b/package/ruby/ruby.mk
@@ -5,7 +5,7 @@
 ################################################################################
 
 RUBY_VERSION_MAJOR = 2.1
-RUBY_VERSION = $(RUBY_VERSION_MAJOR).3
+RUBY_VERSION = $(RUBY_VERSION_MAJOR).4
 RUBY_VERSION_EXT = 2.1.0
 RUBY_SITE = http://cache.ruby-lang.org/pub/ruby/$(RUBY_VERSION_MAJOR)
 RUBY_DEPENDENCIES = host-pkgconf host-ruby
-- 
2.0.4

[Buildroot] [PATCH] ruby: security bump to version 2.1.4

[Peter Korsgaard]

>>>>> "Gustavo" == Gustavo Zacarias <gustavo@zacarias.com.ar> writes:

 > Fixes:
 > CVE-2014-8080 - Denial of service XML expansion

 > And change default ext/openssl settings WRT CVE-2014-3566.

I know it wasn't caused by this bump, but we have a number of autobuild
issues related to RUBY_EXEC_PREFIX. Could you perhaps take a look
(ignore the bfin ones)?

http://autobuild.buildroot.net/?reason=ruby-2.1.4
http://autobuild.buildroot.net/?reason=ruby-2.1.3

Thanks!

-- 
Bye, Peter Korsgaard

[Buildroot] [PATCH] ruby: security bump to version 2.1.4

[Gustavo Zacarias]

On 11/03/2014 07:14 PM, Peter Korsgaard wrote:

> I know it wasn't caused by this bump, but we have a number of autobuild
> issues related to RUBY_EXEC_PREFIX. Could you perhaps take a look
> (ignore the bfin ones)?
> 
> http://autobuild.buildroot.net/?reason=ruby-2.1.4
> http://autobuild.buildroot.net/?reason=ruby-2.1.3

Hi.
I'm unable to reproduce it.
And it seems to be limited to failures on gcc16 (the 2.1.3 bfin failures
are a different issue).
So i think it's something there since i've tested on a very old/bare
debian chroot here. Possibly a candidate for blacklisting.
Regards.