# changelog

author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.11-2
changelog:
  - Make a patch out of Michal's pkgconfig support.
  - Modernize the configure.ac file for Automake >= 1.13.
  - Respect the Fedora CFLAGS
    https://bugzilla.redhat.com/show_bug.cgi?id=908096


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.15-3
changelog:
  - Get the package closer to what upstream intended:
    - Do not move the headers into a subfolder of /usr/include
    - Make a libev-libevent-devel subpackage to contain the libevent
      compatibility header, so that only this subpackage conflicts with
      libevent-devel, not all of libev-devel
    - Drop the pkgconfig file, as upstream rejected it several times already.


author: Jan Kaluza <jkaluza@redhat.com> - 4.0.50-5
changelog:
  - use /var/run/passenger instead of /tmp for temporary directory
  - use rpath to find libev and libev-eio


author: Vít Ondruch <vondruch@redhat.com> - 2.2.0-2
changelog:
  - Fixed operating_system to properly install binary extensions.
  - Rebase patches to apply cleanly.
  - Fix PPC64LE support.
  - Fix -tcltk requires.


author: Vít Ondruch <vondruch@redhat.com> - 2.2.2-12
changelog:
  - Fix DNS hijacking vulnerability in api_endpoint() (CVE-2015-3900,
    CVE-2015-4020).
    Resolves: rhbz#1251465


author: Mamoru Tasaka <mtasaka@fedoraproject.org> - 1.3.1-1
changelog:
  - Update from Marek Goldmann <mgoldman@redhat.com>
    - Updated to 1.3.1
    - Patch to make it work with Rake >= 0.9.0.beta.0


author: Vít Ondruch <vondruch@redhat.com> - 0.5.0-1
changelog:
  - Update to i18n 0.5.0.
  - Documentation moved into subpackage.
  - Removed unnecessary cleanup.
  - Preparetion for test suite execution during build.


author: Josef Stribny <jstribny@redhat.com> - 1:1.4.5-1
changelog:
  - Rebuild for https://fedoraproject.org/wiki/Features/Ruby_2.0.0
  - Added patch0 to fix tests for Ruby 2.0
  - Update to Rack 1.4.5


author: Vít Ondruch <vondruch@redhat.com> - 1.1-1
changelog:
  - Add -build package dependency on scl-utils-build.
    Resolves: rhbz#1058613
  - Add LICENSE, README and man page.
    Resolves: rhbz#1063707


author: Josef Stribny <jstribny@redhat.com> - 3.2.6-1
changelog:
  - Rebuild for https://fedoraproject.org/wiki/Features/Ruby_2.0.0
  - Update to sass 3.2.6.
  - Own extra and rails directories (rhbz#911648).


author: <Minnikhanov@gmail.com> - 2.3.0-1
changelog:
  - Updated mail to latest upstream release (v.2.3.0 2011-04-27)
  - Test excluded. May be need Zentest >= 4.4.0 and rubygem(rcov).


author: Vít Ondruch <vondruch@redhat.com> - 2.6.6-1
changelog:
  - Updated to the latest upstream (#670589).
  - Removed flawed require check.
  - Removed obsolete BuildRoot.
  - Removed obsolete cleanup.
  - Package setup and test execution reworked.
  - Removed bindir magick.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.4.0-2
changelog:
  - Removed the duplicated "git checkout" in comment.
  - BR: rubygem(therubyracer) for tests, don't use deprecated js.


author: Vít Ondruch <vondruch@redhat.com> - 0.3.1-1
changelog:
  - Updated to the latest upstream version.
  - Tests enabled.
  - Documentation moved into separate package.
  - Remove unnecessary Hoe runtime dependency.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.1.0-6
changelog:
  - Rebuilt for Ruby 1.9.3.
  - Removed unneeded %defattr and %clean section.
  - Introduced -doc subpackage.


author: Josef Stribny <jstribny@redhat.com> - 0.11.0-0.6.beta5
changelog:
  - Rebuild for https://fedoraproject.org/wiki/Features/Ruby_2.0.0
  - Update to 0.11.0
  - Add patch that fixes bignum operations on Ruby 2.0.


author: Josef Stribny <jstribny@redhat.com> - 1:4.0.2-1
changelog:
  - Update to ActionPack 4.0.2
    - Resolves: rhbz#1037985
  - Fix CVE-2013-6417, CVE-2013-6414, CVE-2013-6415, CVE-2013-6416 and CVE-2013-4491
    - Resolves: rhbz#1036421


author: Robert Kuska <rkuska@redhat.com> - 0.6.28-7
changelog:
  - Add SSL to easy_install resolves CVE-2013-1633 and CVE-2013-2099 
  - For more info related to these CVEs visit rhbz#994182
  Resolves: rhbz#996706


author: Nils Philippsen <nils@redhat.com> - 0.9.6-1
changelog:
  - version 0.9.6:
    * Backport r493-494: documentation typo fixes.
    * Make the CLDR import script work with Python 2.7.
    * Fix various typos.
    * Fixed Python 2.3 compatibility (ticket #146, #233).
    * Sort output of list-locales.
    * Make the POT-Creation-Date of the catalog being updated equal to
      POT-Creation-Date of the template used to update (ticket #148).
    * Use a more explicit error message if no option or argument (command) is
      passed to pybabel (ticket #81).
    * Keep the PO-Revision-Date if it is not the default value (ticket #148).
    * Make --no-wrap work by reworking --width's default and mimic xgettext's
      behaviour of always wrapping comments (ticket #145).
    * Fixed negative offset handling of Catalog._set_mime_headers (ticket #165).
    * Add --project and --version options for commandline (ticket #173).
    * Add a __ne__() method to the Local class.
    * Explicitly sort instead of using sorted() and don't assume ordering
      (Python 2.3 and Jython compatibility).
    * Removed ValueError raising for string formatting message checkers if the
      string does not contain any string formattings (ticket #150).
    * Fix Serbian plural forms (ticket #213).
    * Small speed improvement in format_date() (ticket #216).
    * Fix number formatting for locales where CLDR specifies alt or draft
      items (ticket #217)
    * Fix bad check in format_time (ticket #257, reported with patch and tests by
      jomae)
    * Fix so frontend.CommandLineInterface.run does not accumulate logging
      handlers (#227, reported with initial patch by dfraser)
    * Fix exception if environment contains an invalid locale setting (#200)
  - install python2 rather than python3 executable (#710880)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.4-2
changelog:
  - Fix python main package having dependencies for the python2.6 subpackage
  - Fix places that used the default python instead of python26
  - Attempt to make byte compilation more robust in case we add python3 to EPEL5
  - Run unittests on python3 in F15+


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.5-1
changelog:
  - Rebuilt for SCL.
  - Updated to version 1.5.
  - python-imaging is only a soft dependency, removing it for now.


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-3
changelog:
  - Update License
  - Fix rpmlint warnings
  - Increase verbosity level of tests
  - Disable python 3 build
  - Fix rhbz#987032 (SCL related: wrong shebang)


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.2-1
changelog:
  - Updated to 3.4.2
  - Added scl-utils-build to Requires (rhbz#1144601)
  - Add pynche executable (rhbz#1094640)


author: Robert Kuska <rkuska@redhat.com> - 3.4.2-8
changelog:
  - Add patch for unrestricted decompression in XMLRPC CVE-2013-1753 
  - Add patch to enable HTTPS verify by default CVE-2014-9365
  - Enable set -e inside scl enable while calling tests
  - Skip failing test_readline test
  Resolves: rhbz#1187793 
  Resolves: rhbz#1187795


author: Slavek Kabrda <bkabrda@redhat.com> - 3.4.2-9
changelog:
  - Build debug build with -O1 to improve GDB backtraces
  Resolves: rhbz#1204169
  - Fix tempfile.NamedTemporaryFile being closed while iterating
  Resolves: rhbz#1203236


author: Robert Kuska <rkuska@redhat.com> - 2.0-4
changelog:
  - Fix macros name shipped with build subpackage
  - Define new macro scl_no_vendor for build subpackage


author: Tim Flink <tflink@fedoraproject.org> - 1.4.1-1
changelog:
  - Removed patch for CVE 2013-2099 as it has been included in the upstream 1.4.1 release
  - Updated version to 1.4.1


author: Matej Stuchlik <mstuchli@redhat.com> - 1.5.6-3
changelog:
  - Added patch for local dos with predictable temp dictionary names
    (http://seclists.org/oss-sec/2014/q4/655)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.10-0.5.20120824svn7502
changelog:
  - Rebase to new snapshot with some fixes integrated
  - Reenable one test that I can't replicate the failure with.


author: Jan Kaluza <jkaluza@redhat.com> - 3.4-7
changelog:
  - compile with -fno-strict-aliasing to workaround Python
    bug http://www.python.org/dev/peps/pep-3123/


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.6.0-1
changelog:
  - Update to 2.6.0 which changes some messages thrown by exceptions to match
    with json module in python3.3 stdlib.  Probably safe for older releases but
    the python3 version there is 3.2 so there's also not any real need yet.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.7.9-5
changelog:
  - Rename the patch for test imports to be the same as in RHEL 6 branch.
  - Fix failure in fips mode if index name is too long.
  Resolves: rhbz#1054676


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.0-4
changelog:
  - Add patch to use build_dir argument in build_extension
  - Fix rpmlint warnings
  - License Updated
  - Don't build with python3


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.1-1
changelog:
  - Update to 0.12.1 - fixes CVE-2013-4251 (rhbz#997579)
  - change working directory to build directory when building ext (rhbz#916695)
  - use SHA-256 instead of md5 -- FIPS mode (rhbz#877920)
  - unbundle python-six (bug rhbz#1019642)


author: Josef Stribny <jstribny@redhat.com> - 1.10.2-4
changelog:
  - Fix the .so name from * to cbson
  - Get rid of wrong .so provide on RHEL 6
    - Resolves: rhbz#1203138


author: Joe Orton <jorton@redhat.com> - 3.4-3
changelog:
  - use a NULL c->sbh pointer with httpd 2.4 (possible fix for #867276)
  - add logging for unexpected daemon process loss


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1-4
changelog:
  - Remove unneded rhel-5 specifics.
  - Add some more dependencies to metapackage spec.
  - Fix the enable scriptlet variable definition to be really secure.
  - Move the rpm scripts to python-devel, so that possible depending
  collections can use them as well.


author: Robert Kuska <rkuska@redhat.com> - 1-7
changelog:
  - Make building depending collections on top of python33 easier
  - Add prep phase with setup macro because of rhel7 requirements


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.2-4
changelog:
  - Own the pkgconfig dir and tapsetdir, these are not owned by any
  the respective packages in SCL (rhbz#966547).


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.2-5
changelog:
  - Disable default bytecompilation during build, fixes rhbz#971427.
  - Fix for gettext plural form headers, fixes rhbz#968928.
  - Compile debug build libraries with -O1, fixes rhbz#967900.
  - Print repr() in when C assert fails in debug build, fixes rhbz#971858.


author: Robert Kuska <rkuska@redhat.com> - 3.3.2-8
changelog:
  - Fix memory leak in gdbm module (rhbz#977308)
  - Make building depending collections on top of python33 easier
  - Fix build with libffi containing multilib wrapper for ffi.h (rhbz#979696).


author: Robert Kuska <rkuska@redhat.com> - 3.3.2-9
changelog:
  - Bytecompile all *.py files properly during build (rhbz#1023607)
  - Allow building depending packages with unversioned python macros
    i.e. %{__python} instead of %{__python3}


author: Steve Milner <smilner@fedoraproject.org> - 1.4-1
changelog:
  - update for upstream release
  - Add python2.6 support done by Steve Traylen <steve.traylen@cern.ch>. BZ#662755.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.28-1
changelog:
  - New upstream release:
    - python-3.3 fixes
    - honor umask when setuptools is used to install other modules


author: Tom Lane <tgl@redhat.com> 1.2.3-1
changelog:
  - Update to final release of 1.2.3
  Resolves: #660484
  - Rebuild was needed anyway for mysql ABI break (no more libmysqlclient_r)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.7.9-3
changelog:
  - Fix failure in fips mode if index name is too long.
  - Also fix newly introduced failures in test suite by missing
  import logging.handlers.
  Resolves: rhbz#1054676


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.2.1-5
changelog:
  - Rebuild to generate bytecode properly after fixing rhbz#956289
  - scl-utils now compile man-pages -> use proper name in %files.


author: Robert Kuska <rkuska@redhat.com> - 2.7.5-9
changelog:
  - Add patch to resolve missing libffi while building
  - Remove BuildRequires: db4-devel, add BuildRequires: libdb-devel


author: Slavek Kabrda <bkabrda@redhat.com> - 2.7.8-1
changelog:
  - Update to 2.7.8.
  Resolves: rhbz#1167912
  - Make python-devel depend on scl-utils-build.
  Resolves: rhbz#1170993


author: Matej Stuchlik <mstuchli@redhat.com> - 2.7.8-2
changelog:
  - Fix %check setion not failing properly on failed test
  - Fixed CVE-2013-1752, CVE-2013-1753 
  Resolves: rhbz#1187779


author: Slavek Kabrda <bkabrda@redhat.com> - 1.1-20
changelog:
  - Require python-pip and python-wheel (note: in rh-python34
    this is not necessary, because "python" depends on these).


author: Robert Kuska <rkuska@redhat.com> - 0.6.28-7
changelog:
  - Add SSL to easy_install resolves CVE-2013-1633 and CVE-2013-2099
  - For more info related to these CVEs visit rhbz#994182
  Resolves: rhbz#996705


author: Tomas Hrcka <thrcka@redhat.com> - 1:3.14.5.10-4
changelog:
  - multiple CVE fixes
  - CVE-2013-6639 CVE-2013-6640 CVE-2013-6650 
  - CVE-2013-6668 CVE-2014-1704 CVE-2014-5256


author: Tomas Hrcka <thrcka@redhat.com> - 1:3.14.5.10-7
changelog:
  - Backport api for aborting on uncaught exception
  - https://github.com/joyent/node/commit/fbff7054a47551387a99244e2cf0631f30406798


author: Tomas Hrcka <thrcka@redhat.com> - 1:3.14.5.10-8
changelog:
  - Backport Apply REPLACE_INVALID_UTF8 patch
  - https://github.com/joyent/node/commit/881ac26f27f4ac9585d66c8d8a67d5b246a23d1b


author: Lukas Zapletal <lzap+rpm@redhat.com> - 1:3.2.8-7
changelog:
  - RHBZ#969448 - NULLS FIRST/LAST SQL statement fix for PostgreSQL
    - Resolves: rhbz#969486
  - Add BR: rubygem(json), since older version of RDoc does not pull it in.


author: Vít Ondruch <vondruch@redhat.com> - 1.9.2-1
changelog:
  - Update to mongo 1.9.2.
  - Enabled test suite for non-SCL builds.
  - Import into ruby193 RHSCL.
    - Resolves: rhbz#1009573


author: Lubomir Rintel (Good Data) <lubo.rintel@gooddata.com> - 0.2.5-2
changelog:
  - Bring tests back
  - Depend on ruby(abi)
  - Replace defines with globals
  - Don't delete the world-writable file, fix permissions instead


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1:3.2.6-1
changelog:
  - Update to ActiveResource 3.2.6.
  - Removed no longer needed BuildRoot tag.
  - Run tests without Rake.
  - Introduce -doc subpackage.


author: Vít Ondruch <vondruch@redhat.com> - 1:3.2.8-7
changelog:
  - Fix i18n missing translation XSS.
    * rubygem-actionpack-3.2.16-CVE-2013-4491-Stop-using-i18ns-built-in-HTML-error-handling.patch
    - Resolves: CVE-2013-4491
  - Fix Action View DoS.
    * rubygem-actionpack-3.2.16-CVE-2013-6414-Only-use-valid-mime-type-symbols-as-cache-keys.patch
    - Resolves: CVE-2013-6414
  - Fix number_to_currency XSS.
    * rubygem-actionpack-3.2.16-CVE-2013-6415-Escape-the-unit-value-provided-to-number_to_currency.patch
    - Resolves: CVE-2013-6415
  - Fix unsafe query generation risk in Ruby on Rails (incomplete fix for
    CVE-2013-0155) (CVE-2013-6417).
    * rubygem-actionpack-3.2.16-CVE-2013-6417-Deep-Munge-the-parameters-for-GET-and-POST.patch
    - Resolves: CVE-2013-6417


author: Josef Stribny <jstribny@redhat.com> - 0.18.1-2
changelog:
  - Filter auto-generated requires from example .sh script included in tests
    - Related: rhbz#1063274


author: Matthew Kent <mkent@magoazul.com> - 2.6.5-2
changelog:
  - Move file rename to build stage (#530275).
  - Simplify %check stage (#530275).
  - Remove disable of test_syntax2, fixed by new ruby build (#530275).


author: Josef Stribny <jstribny@redhat.com> - 0.11.0-0.8.beta5
changelog:
  - Don't install v8 scl macros, they should come in v8 scldevel subpackage
    - Resolves: rhbz#1065887


author: Vít Ondruch <vondruch@redhat.com> - 1.0.9-2
changelog:
  - More concise summary
  - Do not remove manpages, they are used internally
  - Added buildroot cleanup in clean section


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.2.6-1
changelog:
  - Update to Railties 3.2.6.
  - Move some files into -doc subpackage.
  - Remove the unneeded %defattr.
  - Introduce %check section (not running tests yet, as they are part of dependency loop).


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.484-42
changelog:
  - Update to Ruby 1.9.3-p484.
    - Resolves: rhbz#1033904
  - Fix heap overflow in floating point parsing (CVE-2013-4164).
    - Resolves: rhbz#1033492
  - Allow MD5 in OpenSSL for tests.


author: Josef Stribny <jstribny@redhat.com> - 1.9.3.448-43
changelog:
  - Fix depending collections can't point into correct directory
    - Resolves: rhbz#1002434
  - Fix binary extensions cannot be loaded from an scl namespace other than ruby193
    - Resolves: rhbz#998845


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.484-49
changelog:
  - Explicitly depend on libyaml, to workaround issues with scl prefixed libyam.
    Resolves: rhbz#1070763


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.484-50
changelog:
  - Fix off-by-one stack-based buffer overflow in the encodes() function
    (CVE-2014-4975).
    Related: rhbz#1164004
  - Fix REXML billion laughs attack via parameter entity expansion
    (CVE-2014-8080).
    Related: rhbz#1164004
  - REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
    Related: rhbz#1164004


author: <Minnikhanov@gmail.com> - 2.2.15-2
changelog:
  - Fix Comment 18 #665560. https://bugzilla.redhat.com/show_bug.cgi?id=665560#c18 
  - Remove create Gemfile.lock at prep-section.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.3.3-1
changelog:
  - Updated to tilt 1.3.3.
  - Removed patch that fixed BZ #715713, as it is a part of this version.
  - Excluded unnecessary files.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.3.3-2
changelog:
  - Rebuilt for Ruby 1.9.3.
  - Introduced %bootstrap macro to deal with dependency loop for BuildRequires.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1:1.4.0-1
changelog:
  - Update to Rack 1.4.
  - Moved gem install to %prep to be able to apply patches.
  - Applied two patches that fix test failures with Ruby 1.8.7-p357.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1:3.2.6-1
changelog:
  - Update to ActiveSupport 3.2.6.
  - Removed unneeded BuildRoot tag.
  - Tests no longer fail with newer versions of Mocha, remove workaround.


author: Vít Ondruch <vondruch@redhat.com> - 1.1-1
changelog:
  - Bump version.
  - Add -scldevel sub-package.
    Resolves: rhbz#1063297
  - Add -build package dependency on scl-utils-build.
    Resolves: rhbz#1058615
  - Add LICENSE, README and man page.
    Resolves: rhbz#1061459


author: Vít Ondruch <vondruch@redhat.com> - 1.1-1
changelog:
  - Bump version.
  - Drop rails dependencies.
    Resolves: rhbz#1056022
  - Add -build package dependency on scl-utils-build.
    Resolves: rhbz#1058616
  - Add LICENSE, README and man page.
    Resolves: rhbz#1061460


author: Josef Stribny <jstribny@redhat.com> - 2.0.0.353-16
changelog:
  - Update to Ruby 2.0.0-p353
    - Fixes heap overflow in floating point parsing (CVE-2013-4164)
    - Resolves: rhbz#1033906


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-22
changelog:
  - Fix RubyGems test suite.
    Resolves: rhbz#1069184
  - Do not use bundled libyaml.
    Resolves: rhbz#1069107


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-23
changelog:
  - Explicitly depend on libyaml, to workaround issues with scl prefixed libyam.
    Resolves: rhbz#1071347


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.353-24
changelog:
  - Fix off-by-one stack-based buffer overflow in the encodes() function
    (CVE-2014-4975).
    Related: rhbz#1164005
  - Fix REXML billion laughs attack via parameter entity expansion
    (CVE-2014-8080).
    Related: rhbz#1164005
  - REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
    Related: rhbz#1164005


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.645-25
changelog:
  - Update to Ruby 2.0.0-p645.
    * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
         with-DESTDIR.patch; subsumed
    * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
        default-.gems.patch; subsumed
    * Remove Patch23: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
        subsumed
    * Remove Patch29: ruby-2.0.0-p594-CVE-2014-8080-REXML-billion-laughs-
        attack.patch; subsumed
    * Remove Patch30: ruby-2.0.0-p598-CVE-2014-8090-REXML-incomplete-fix-for-
        CVE-2014-8080.patch; subsumed
    Resolves: rhbz#1070594


