GitList

Browse code

Bump ruby version to 2.5.3, to fix CVE-2018-16395 & CVE-2018-16396

Change-Id: I82ba7bc164699126624dc88fd0bc4968bda081ee
Reviewed-on: http://photon-jenkins.eng.vmware.com:8082/6426
Tested-by: gerrit-photon <photon-checkins@vmware.com>
Reviewed-by: Srinidhi Rao <srinidhir@vmware.com>
Reviewed-by: Anish Swaminathan <anishs@vmware.com>

gsujayvmw authored on 2019/01/01 20:41:59
Showing 42 changed files

SPECS/apparmor/apparmor.spec index 5eb6d96..679a624 100644
SPECS/ruby/ruby.spec index 301489f..768aa5c 100644
SPECS/rubygem-activesupport/rubygem-activesupport.spec index fe5f6b5..97db4f6 100755
SPECS/rubygem-aws-eventstream/rubygem-aws-eventstream.spec index 72361eb..ee3b9fa 100755
SPECS/rubygem-aws-partitions/rubygem-aws-partitions.spec index 9114bab..b690bbc 100755
SPECS/rubygem-aws-sdk-core/rubygem-aws-sdk-core.spec index ceaf2ae..1e48500 100755
SPECS/rubygem-aws-sdk-kms/rubygem-aws-sdk-kms.spec index 47c3573..c40f836 100755
SPECS/rubygem-aws-sdk-s3/rubygem-aws-sdk-s3.spec index d066074..1f5a9e4 100755
SPECS/rubygem-aws-sdk-sqs/rubygem-aws-sdk-sqs.spec index 44a4c0d..362a019 100755
SPECS/rubygem-aws-sigv4/rubygem-aws-sigv4.spec index 2818415..f4f6792 100755
SPECS/rubygem-backports/rubygem-backports.spec index d4f5500..a6ebc4a 100644
SPECS/rubygem-builder/rubygem-builder.spec index 0bb9332..57173fe 100644
SPECS/rubygem-bundler/rubygem-bundler.spec index e3c861d..590dedc 100755
SPECS/rubygem-concurrent-ruby/rubygem-concurrent-ruby.spec index 691fd12..e091c2c 100755
SPECS/rubygem-cool-io/rubygem-cool-io.spec index 5e74921..35200d5 100755
SPECS/rubygem-dig_rb/rubygem-dig_rb.spec index 9e8e814..06ec48c 100755
SPECS/rubygem-ffi/rubygem-ffi.spec index 3e36e7c..938737a 100755
SPECS/rubygem-fluent-plugin-s3/rubygem-fluent-plugin-s3.spec index 7a4cab7..1711b3f 100755
SPECS/rubygem-fluent-plugin-systemd/rubygem-fluent-plugin-systemd.spec index 95e5e04..53b34d6 100755
SPECS/rubygem-fluentd/rubygem-fluentd.spec index 6dbefc1..c88ea4a 100755
SPECS/rubygem-highline/rubygem-highline.spec index bcf1077..19af8d8 100644
SPECS/rubygem-http_parser.rb/rubygem-http_parser.rb.spec index 3f673d6..baefb11 100755
SPECS/rubygem-i18n/rubygem-i18n.spec index 0033f86..1e822ff 100755
SPECS/rubygem-jmespath/rubygem-jmespath.spec index a6ac8f2..f1c84d2 100755
SPECS/rubygem-libxml-ruby/rubygem-libxml-ruby.spec index a2786c6..75c0d9c 100644
SPECS/rubygem-mini_portile/rubygem-mini_portile.spec index 729d7ef..23e3898 100644
SPECS/rubygem-mini_portile2/rubygem-mini_portile2.spec index d791592..5cb1be1 100644
SPECS/rubygem-msgpack/rubygem-msgpack.spec index 93c3a65..3a9dc06 100755
SPECS/rubygem-nokogiri/rubygem-nokogiri.spec index f10df69..37e770f 100644
SPECS/rubygem-rbvmomi/rubygem-rbvmomi.spec index 6e2b19f..01695f6 100644
SPECS/rubygem-serverengine/rubygem-serverengine.spec index 4ae4643..87dd46a 100755
SPECS/rubygem-sigdump/rubygem-sigdump.spec index 80646d7..5cb6980 100755
SPECS/rubygem-strptime/rubygem-strptime.spec index 9299244..b41c33b 100755
SPECS/rubygem-systemd-journal/rubygem-systemd-journal.spec index 1223d33..64a451a 100755
SPECS/rubygem-terminal-table/rubygem-terminal-table.spec index cab07b8..f4b88b2 100644
SPECS/rubygem-thread_safe/rubygem-thread_safe.spec index 5f6de21..e61b6d2 100755
SPECS/rubygem-trollop/rubygem-trollop.spec index 09bd2d0..cf2c2b8 100644
SPECS/rubygem-tzinfo-data/rubygem-tzinfo-data.spec index c07e83f..5f7f5b7 100755
SPECS/rubygem-tzinfo/rubygem-tzinfo.spec index 82c0366..fb4c1f4 100755
SPECS/rubygem-unicode-display_width/rubygem-unicode-display_width.spec index 6ec9a06..832f0b8 100644
SPECS/rubygem-yajl-ruby/rubygem-yajl-ruby.spec index 6606051..7627a8b 100755
SPECS/rubygem-zip/rubygem-zip.spec index 0e2cd1d..063ca19 100644

@@ -1,6 +1,6 @@
                      Name:           apparmor
                      Version:        2.13
                     -Release:        3%{?dist}
                     +Release:        4%{?dist}
                      Summary:        AppArmor is an effective and easy-to-use Linux application security system.
                      License:        GNU LGPL v2.1
                      URL:            https://launchpad.net/apparmor
@@ -370,9 +370,11 @@ make DESTDIR=%{buildroot} install
                      %files -n ruby-apparmor
                      %defattr(-,root,root)
                     -%{_libdir}/ruby/site_ruby/2.4.0/x86_64-linux/LibAppArmor.so
                     +%{_libdir}/ruby/site_ruby/2.5.0/x86_64-linux/LibAppArmor.so
                      %changelog
                     +*   Mon Feb 4 2019 Sujay G <gsujay@vmware.com> 2.13-4
                     +-   Increment the release version as part of ruby upgrade
                      *   Wed Aug 8 2018 Keerthana K <keerthanak@vmware.com> 2.13-3
                      -   Updating apparmor.service to start instead of reload during command start.
                      -   Enabling apparmor service post installation of parser.

@@ -1,20 +1,14 @@
                      Summary:        Ruby
                      Name:           ruby
                     -Version:        2.4.4
                     +Version:        2.5.3
                      Release:        1%{?dist}
                      License:        BSDL
                      URL:            https://www.ruby-lang.org/en/
                      Group:          System Environment/Security
                      Vendor:         VMware, Inc.
                      Distribution:   Photon
                     -Source0:        http://cache.ruby-lang.org/pub/ruby/2.4/%{name}-%{version}.tar.bz2
                     -%define sha1    ruby=1cc548ba3eb821e29ab92ac13e1d5c7bf23b1526
                     -Patch0:         ruby-CVE-2017-9224.patch
                     -Patch1:         ruby-CVE-2017-9226.patch
                     -Patch2:         ruby-CVE-2017-9227.patch
                     -Patch3:         ruby-CVE-2017-9229.patch
                     -Patch4:         ruby-CVE-2017-9228.patch
                     -Patch5:         ruby-CVE-2017-17790.patch
                     +Source0:        http://cache.ruby-lang.org/pub/ruby/2.5/%{name}-%{version}.tar.bz2
                     +%define sha1    ruby=d47ede7dab79de25fcc274dfcad0f92f389a4313
                      BuildRequires:  openssl-devel
                      BuildRequires:  ca-certificates
                      BuildRequires:  readline-devel
@@ -29,15 +23,9 @@ This is useful for object-oriented scripting.
                      %prep
                      %setup -q
                     -%patch0 -p1
                     -%patch1 -p1
                     -%patch2 -p1
                     -%patch3 -p1
                     -%patch4 -p1
                     -%patch5 -p1
                      %build
                      ./configure \
                     -    --prefix=%{_prefix}   \
                     +        --prefix=%{_prefix}   \
                              --enable-shared \
                              --docdir=%{_docdir}/%{name}-%{version}
                      make %{?_smp_mflags} COPY="cp -p"
@@ -65,6 +53,8 @@ rm -rf %{buildroot}/*
                      %{_docdir}/%{name}-%{version}
                      %{_mandir}/man1/*
                      %changelog
                     +*   Tue Jan 01 2019 Sujay G <gsujay@vmware.com> 2.5.3-1
                     +-   Bump ruby version to 2.5.3, to fix CVE-2018-16395 & CVE-2018-16396
                      *   Fri Apr 27 2018 Xiaolin Li <xiaolinl@vmware.com> 2.4.4-1
                      -   Update to version 2.4.4, fix CVE-2018-8777, CVE-2018-8778,
                      -   CVE-2018-8779, CVE-2018-8780, CVE-2018-6914, CVE-2017-17742

@@ -4,7 +4,7 @@
                      Name: rubygem-activesupport
                      Version:        5.0.0.1
                     -Release:        1%{?dist}
                     +Release:        2%{?dist}
                      Summary:        Support libaries for Rails framework.
                      Group:          Development/Languages
                      License:        MIT
@@ -31,5 +31,7 @@ gem install -V --local --force --install-dir %{buildroot}/%{gemdir} %{SOURCE0}
                      %{gemdir}
                      %changelog
                     +*   Mon Feb 4 2019 Sujay G <gsujay@vmware.com> 5.0.0.1-2
                     +-   Increment the release version as part of ruby upgrade
                      *   Fri Aug 25 2017 Kumar Kaushik <kaushikk@vmware.com> 5.0.0.1-1
                      -   Initial build

@@ -5,7 +5,7 @@
                      Name: rubygem-backports
                      Version:        3.7.0
                     -Release:        2%{?dist}
                     +Release:        3%{?dist}
                      Summary:        Backports of Ruby features for older Ruby
                      Group:          Development/Languages
                      License:        MIT
@@ -39,6 +39,8 @@ gem install -V --local --force --install-dir %{buildroot}/%{gemdir} %{SOURCE0}
                      %{gemdir}
                      %changelog
                     +*   Mon Feb 4 2019 Sujay G <gsujay@vmware.com> 3.7.0-3
                     +-   Increment the release version as part of ruby upgrade
                      *   Fri Aug 2 2017 Kumar Kaushik <kaushikk@vmware.com> 3.7.0-2
                      -   Adding requires for test support.
                      *   Tue Mar 28 2017 Xiaolin Li <xiaolinl@vmware.com> 3.7.0-1

@@ -4,7 +4,7 @@
                      Name: rubygem-ffi
                      Version:        1.9.25
                     -Release:        1%{?dist}
                     +Release:        2%{?dist}
                      Summary:        Ruby FFI library
                      Group:          Development/Languages
                      License:        BSD-2-Clause
@@ -12,8 +12,6 @@ URL:            https://rubygems.org/gems/%{gem_name}/versions/%{version}
                      Source0:        https://rubygems.org/downloads/ffi-%{version}.gem
                      %define sha1    ffi=86fa011857f977254ccf39f507587310f9ade768
                      BuildRequires:  ruby > 2.1.0
                     -BuildArch: %{_arch}
                     -Provides: rubygem-ffi = %{version}
                      %description
                      Ruby FFI library
@@ -29,8 +27,11 @@ gem install -V --local --force --install-dir %{buildroot}/%{gemdir} %{SOURCE0}
                      %files
                      %defattr(-,root,root,-)
                      %{gemdir}
                     -%exclude /usr/lib/ruby/gems/2.4.0/gems/ffi-1.9.25/ext/ffi_c/libffi-x86_64-linux/include/ffitarget.h
                     +%exclude /usr/lib/ruby/gems/2.5.0/gems/ffi-1.9.25/ext/ffi_c/libffi-%{_arch}-linux/include/ffitarget.h
                      %changelog
                     +*   Mon Feb 4 2019 Sujay G <gsujay@vmware.com> 1.9.25-2
                     +-   Increment the release version as part of ruby upgrade
                     +-   Fix build issues (Remove BuildArch, Provides paramater) & Added aarch64 support
                      *   Mon Aug 13 2018 Srinidhi Rao <srinidhir@vmware.com> 1.9.25-1
                      -   Initial build

@@ -4,7 +4,7 @@
                      Name: rubygem-fluent-plugin-systemd
                      Version:        1.0.1
                     -Release:        2%{?dist}
                     +Release:        3%{?dist}
                      Summary:        This is a fluentd input plugin. It reads logs from the systemd journal.
                      Group:          Development/Languages
                      License:        Apache 2
@@ -34,6 +34,8 @@ gem install -V --local --force --install-dir %{buildroot}/%{gemdir} %{SOURCE0}
                      %{gemdir}
                      %changelog
                     +*   Mon Feb 4 2019 Sujay G <gsujay@vmware.com> 1.0.1-3
                     +-   Increment the release version as part of ruby upgrade
                      *   Thu Aug 16 2018 Srinidhi Rao <srinidhir@vmware.com> 1.0.1-2
                      -   Added the dependency on rubygem-systemd-journal
                      *   Tue Jul 24 2018 Srinidhi Rao <srinidhir@vmware.com> 1.0.1-1

@@ -3,7 +3,7 @@
                      %define gem_name highline
                      Name: rubygem-highline
                      Version: 1.7.8
                     -Release: 4%{?dist}
                     +Release: 5%{?dist}
                      Summary: A high-level IO library that provides validation, type conversion, and more for command-line interfaces
                      Group: Applications/Programming
                      License: BSD
@@ -29,6 +29,8 @@ LANG=en_US.UTF-8  rake test
                      %defattr(-,root,root,-)
                      %{gemdir}
                      %changelog
                     +* Mon Feb 4 2019 Sujay G <gsujay@vmware.com> 1.7.8-5
                     +- Increment the release version as part of ruby upgrade
                      * Tue Sep 05 2017 Chang Lee <changlee@vmware.com> 1.7.8-4
                      - Added %check
                      * Wed Jan 25 2017 Anish Swaminathan <anishs@vmware.com> 1.7.8-3

@@ -3,7 +3,7 @@
                      %define gem_name libxml-ruby
                      Name:           rubygem-libxml-ruby
                      Version:        3.0.0
                     -Release:        3%{?dist}
                     +Release:        4%{?dist}
                      Summary:        Provides Ruby language bindings for the GNOME Libxml2 XML toolkit
                      Group:          Applications/Programming
                      License:        BSD
@@ -13,7 +13,7 @@ URL:            https://rubygems.org/gems/%{gem_name}
                      Source0:        https://rubygems.org/downloads/libxml-ruby-%{version}.gem
                      %define sha1    libxml-ruby=9a4f28d019da0aef73773d676f9ba3ce9294b6bb
                      BuildRequires:  ruby >= 2.4.0
                     -BuildRequires:  libxml2-devel
                     +BuildRequires:  libxml2-devel
                      Requires:       ruby >= 2.4.0
                      %description
                      Provides Ruby language bindings for the GNOME Libxml2 XML toolkit
@@ -34,6 +34,8 @@ rake test
                      %defattr(-,root,root,-)
                      %{gemdir}
                      %changelog
                     +*   Mon Feb 4 2019 Sujay G <gsujay@vmware.com> 3.0.0-4
                     +-   Increment the release version as part of ruby upgrade
                      *   Thu Sep 05 2017 Chang Lee <changlee@vmware.com> 3.0.0-3
                      -   Added %check without canonicalize tests
                      *   Thu Apr 13 2017 Siju Maliakkal <smaliakkal@vmware.com> 3.0.0-2

@@ -3,7 +3,7 @@
                      %define gem_name zip
                      Name: rubygem-zip
                      Version: 2.0.2
                     -Release: 5%{?dist}
                     +Release: 6%{?dist}
                      Summary: Ruby library for reading and writing Zip files
                      Group: Applications/Programming
                      License: BSD
@@ -30,6 +30,8 @@ rake test
                      %{gemdir}
                      %changelog
                     +* Mon Feb 4 2019 Sujay G <gsujay@vmware.com> 2.0.2-6
                     +- Increment the release version as part of ruby upgrade
                      * Fri Jun 23 2017 Chang Lee <changlee@vmware.com> 2.0.2-5
                      - Updated %check
                      * Wed Jan 25 2017 Anish Swaminathan <anishs@vmware.com> 2.0.2-4