[ol7_software_collections] rh-ruby24-rubygem-rake-12.0.0-92.el7.noarch

Rake is a Make-like program implemented in Ruby. Tasks and dependencies are
specified in standard Ruby syntax.

Changelog (Show File list) (Show related packages)

• Thu Apr 11 2019 Jun Aruga <jaruga@redhat.com> - 2.4.6-92

  - Upgrade to Ruby 2.4.6.
  - Delete directory using symlink when decompressing tar
    Resolves: CVE-2019-8320
  - Fix escape sequence injection vulnerability in verbose.
    Resolves: CVE-2019-8321
  - Fix escape sequence injection vulnerability in gem owner.
    Resolves: CVE-2019-8322
  - Fix escape sequence injection vulnerability in API response handling.
    Resolves: CVE-2019-8323
  - Prohibit arbitrary code execution when installing a malicious gem.
    Resolves: CVE-2019-8324
  - Fix escape sequence injection vulnerability in errors.
    Resolves: CVE-2019-8325

• Mon Nov 05 2018 Pavel Valena <pvalena@redhat.com> - 2.4.5-91

  - Upgrade to Ruby 2.4.5.
    Resolves: CVE-2018-16395
    Resolves: rhbz#1563077
    Removed Patch10: ruby-2.5.0-Disable-Tokyo-TZ-tests.patch; subsumed
  - Properly harden package using -fstack-protector-strong.
  - Fix: return default path with nonexistent home dir(rhbz#1602879)

• Mon Mar 12 2018 Pavel Valena <pvalena@redhat.com> - 2.4.3-90

  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Related: rhbz#1549651

• Mon Feb 12 2018 Pavel Valena <pvalena@redhat.com> - 2.4.3-89

  - Upgrade to Ruby 2.4.3.
    Resolves: rhbz#1549651
    Resolves: CVE-2017-17405
    * Remove Patch10: ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
        -vulnerability.patch
        subsumed

• Mon Oct 30 2017 Vít Ondruch <vondruch@redhat.com> - 2.4.2-86

  - Upgrade to Ruby 2.4.2.
    * Remove Patch10: ruby-2.4.0-vm_insnhelper.c-block-argument-at-tailcall.patch;
        subsumed
    Resolves: rhbz#1506785
  - Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
    * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
        -vulnerability.patch
    Resolves: CVE-2017-0903

• Tue Jan 17 2017 Vít Ondruch <vondruch@redhat.com> - 2.4.0-75

  - Apply patch fixing rubygem-mongo build failures.

• Mon Jan 09 2017 Vít Ondruch <vondruch@redhat.com> - 2.4.0-73

  - Reshuffle the %license macro to avoid %postun scriptlet issues.
    Resolves: rhbz#1411233

• Mon Jan 09 2017 Vít Ondruch <vondruch@redhat.com> - 2.4.0-72

  - Add rubygem-io-console dependency for rubygem-rdoc.

• Mon Jan 02 2017 Vít Ondruch <vondruch@redhat.com> - 2.4.0-71

  - ruby-libs should not own links to unbundled gems.

• Mon Jan 02 2017 Vít Ondruch <vondruch@redhat.com> - 2.4.0-70

  - Upgrade to Ruby 2.4.0.
  - Workaround "an invalid stdio handle" error on PPC (rhbz#1361037).
  - Add gemspec_add_dep and gemspec_remove_dep macros.
  - Move gemified xmlrpc into subpackage.
  - Move gemified openssl into subpackage.
  - Make symlinks for json gem.
  - Tk is removed from stdlib.
  - Harden package.
  - Extend 'gem_' macros for pre-release version support.