Hello community, here is the log from the commit of package ruby2.6 for openSUSE:Factory checked in at 2019-10-18 14:30:29 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ruby2.6 (Old) and /work/SRC/openSUSE:Factory/.ruby2.6.new.2352 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ruby2.6" Fri Oct 18 14:30:29 2019 rev:8 rq:738578 version:2.6.5 Changes: -------- --- /work/SRC/openSUSE:Factory/ruby2.6/ruby2.6.changes 2019-07-21 11:30:14.412818901 +0200 +++ /work/SRC/openSUSE:Factory/.ruby2.6.new.2352/ruby2.6.changes 2019-10-18 14:30:30.840695586 +0200 @@ -1,0 +2,17 @@ +Tue Oct 8 09:42:13 UTC 2019 - Marcus Rueckert <[email protected]> + +- update to 2.6.5 + - https://www.ruby-lang.org/en/news/2019/10/01/ruby-2-6-5-released/ + - CVE-2019-16255: A code injection vulnerability of Shell#[] + and Shell#test + - CVE-2019-16254: HTTP response splitting in WEBrick + (Additional fix) + - CVE-2019-15845: A NUL injection vulnerability of File.fnmatch + and File.fnmatch? + - CVE-2019-16201: Regular Expression Denial of Service + vulnerability of WEBrickâs Digest access authentication + - https://www.ruby-lang.org/en/news/2019/08/28/ruby-2-6-4-released/ + - Multiple jQuery vulnerabilities in RDoc (CVE-2012-6708 + CVE-2015-9251) + +------------------------------------------------------------------- Old: ---- ruby-2.6.3.tar.xz New: ---- ruby-2.6.5.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ruby2.6.spec ++++++ --- /var/tmp/diff_new_pack.xhm2DC/_old 2019-10-18 14:30:31.720693295 +0200 +++ /var/tmp/diff_new_pack.xhm2DC/_new 2019-10-18 14:30:31.724693284 +0200 @@ -25,9 +25,9 @@ #### %define patch_level p0 -Version: 2.6.3 +Version: 2.6.5 Release: 0 -%define pkg_version 2.6.3 +%define pkg_version %{version} # make the exported API version explicit %define api_version 2.6.0 %define rb_binary_suffix .ruby2.6 ++++++ ruby-2.6.3.tar.xz -> ruby-2.6.5.tar.xz ++++++ /work/SRC/openSUSE:Factory/ruby2.6/ruby-2.6.3.tar.xz /work/SRC/openSUSE:Factory/.ruby2.6.new.2352/ruby-2.6.5.tar.xz differ: char 25, line 1
