Bug 1280296 - Rebase to the latest Ruby 2.2 point release
Summary: Rebase to the latest Ruby 2.2 point release
Keywords:
Status: CLOSED EOL
Alias: None
Product: Red Hat Software Collections
Classification: Red Hat
Component: ruby
Version: rh-ruby22
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
: 3.1
Assignee: Pavel Valena
QA Contact: BaseOS QE - Apps
URL:
Whiteboard:
Depends On:
Blocks: 1432980 1549646
TreeView+ depends on / blocked
 
Reported: 2015-11-11 12:32 UTC by Vít Ondruch
Modified: 2021-06-10 11:02 UTC (History)
8 users (show)

Fixed In Version:
Doc Type: Rebase: Bug Fixes and Enhancements
Doc Text:
Rebase package(s) to version: 2.2.9 Highlights, important fixes, or notable enhancements: Upgrade to rubygems 2.4.5.4 Upgrade to psych 2.0.8.1 Upgrade to json 1.8.1.1
Clone Of:
: 1395796 1549646 (view as bug list)
Environment:
Last Closed: 2018-05-18 08:41:56 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Bugzilla 1369090 0 unspecified CLOSED Ruby 2.2.2 function argument bug fixed in 2.2.3 [rhscl-2.2.z] 2021-02-22 00:41:40 UTC

Internal Links: 1369090

Description Vít Ondruch 2015-11-11 12:32:55 UTC
New Ruby 2.2 release is available. We should consider rebase.

https://www.ruby-lang.org/en/news/2015/08/18/ruby-2-2-3-released/

Comment 1 Scott Merrill 2016-03-14 14:12:37 UTC
I'd like to see this rebase occur, too.

https://bugzilla.redhat.com/show_bug.cgi?id=1317076

Comment 3 Vít Ondruch 2016-05-02 13:16:16 UTC
Please note that 2.2.5 is already released:

https://www.ruby-lang.org/en/news/2016/04/26/ruby-2-2-5-released/

Comment 7 Vít Ondruch 2017-03-29 08:01:03 UTC
https://www.ruby-lang.org/en/news/2017/03/28/ruby-2-2-7-released/

This is the last regular maintenance release of Ruby 2.2. After this, only security releases will be provided for one additional year.

Comment 11 Pavel Valena 2017-09-15 16:31:20 UTC
Latest Ruby 2.2 release:
https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-2-8-released/

Contains fixes for:
 - Bug CVE-2017-0898: Buffer underrun vulnerability in Kernel.sprintf
 - Bug CVE-2017-10784: Escape sequence injection vulnerability in the Basic authentication of WEBrick
 - Bug CVE-2017-14033: Buffer underrun vulnerability in OpenSSL ASN1 decode
 - Bug CVE-2017-14064: Heap exposure in generating JSON
 - Multiple vulnerabilities in RubyGems

Comment 12 Vít Ondruch 2017-12-15 09:03:18 UTC
Ruby 2.2.9 is now available:

https://www.ruby-lang.org/en/news/2017/12/14/ruby-2-2-9-released/

Comment 15 Joe Orton 2018-05-18 08:41:56 UTC
In accordance with the Red Hat Software Collections Product Life Cycle, the support period for this collection has ended.

New bug fix, enhancement, and security errata updates, as well as technical support services will no longer be made available for this collection.

Customers are encouraged to upgrade to a later release.

Please contact Red Hat Support if you have further questions, or refer to the support lifecycle page for more information. https://access.redhat.com/support/policy/updates/rhscl/


Note You need to log in before you can comment on or make changes to this bug.