Package ruby: Information

Source package: ruby
Version: 2.4.2-alt2
Build time:  Oct 12, 2017, 01:22 PM in the task #190689
Category: Development/Ruby
Report package bug
Gear: https://git.altlinux.org/gears/r/ruby.git?a=tree;hb=050f9386a56b…
Home page: http://www.ruby-lang.org/
License: BSD (revised) or Ruby
Summary: An Interpreted Object-Oriented Scripting Language
Description: 
Ruby is an interpreted scripting language for quick and easy object-oriented
programming. It has many features for processing text files and performing system
management tasks (as in Perl). It is simple, straight-forward, and extensible.

This package contains interpreter of object-oriented scripting language Ruby.
List of rpms provided by this srpm:
irb (noarch)
libruby (x86_64, i586)
libruby-debuginfo (x86_64, i586)
libruby-devel (x86_64, i586)
libruby-devel-static (x86_64, i586)
ri (noarch)
ruby (x86_64, i586)
ruby-debuginfo (x86_64, i586)
ruby-doc-ri (noarch)
ruby-stdlibs (x86_64, i586)
ruby-stdlibs-debuginfo (x86_64, i586)
ruby-tools (noarch)
Maintainer: Andrey Cherepanov
List of contributors:
Andrey Cherepanov
Vladimir D. Seleznev
Denis Medvedev
Led
Andriy Stepanov
Sir Raorn
Kirill A. Shutemov
Pavlov Konstantin
qa-robot
Kachalov Anton
Alexander Bokovoy
Grigory Milev
Stanislav Ievlev
    1. libdb4-devel
    2. libreadline-devel
    3. ruby
    4. libyaml-devel
    5. libffi-devel
    6. ruby-stdlibs
    7. libssl-devel
    8. libgdbm-devel
    9. libncursesw-devel
    10. doxygen
    11. groff-base
    12. rpm-build-ruby >= 1:0.1.3
    13. gcc-c++
    14. zlib-devel

Last changed

Oct. 12, 2017 Andrey Cherepanov 2.4.2-alt2
- Merge rubygems-2.6.14 changes
- Fixes:
  + CVE-2017-0903 Unsafe Object Deserialization Vulnerability in RubyGems
Sept. 16, 2017 Andrey Cherepanov 2.4.2-alt1
- New version 2.4.2
- Security fixes:
  + CVE-2017-0898: Buffer underrun vulnerability in Kernel.sprintf
  + CVE-2017-10784: Escape sequence injection vulnerability in the Basic authentication of WEBrick
  + CVE-2017-14033: Buffer underrun vulnerability in OpenSSL ASN1 decode
  + CVE-2017-14064: Heap exposure in generating JSON
Sept. 5, 2017 Andrey Cherepanov 2.4.1-alt1
- New version 2.4.1 with gems 2.6.13
- Security fixes:
  + CVE-2017-0902 a DNS request hijacking vulnerability
  + CVE-2017-0899 an ANSI escape sequence vulnerability
  + CVE-2017-0900 a DoS vulnerability in the query command
  + CVE-2017-0901 a vulnerability in the gem installer that allowed a malicious gem to overwrite arbitrary files
- ext/tk: Tk is removed from stdlib. [Feature #8539]
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.0
Back to top