[ubuntu/disco-proposed] ruby2.5 2.5.3-3ubuntu1 (Accepted)

Christian Ehrhardt christian.ehrhardt at canonical.com
Wed Dec 5 07:49:16 UTC 2018 

ruby2.5 (2.5.3-3ubuntu1) disco; urgency=medium

  * Merge with Debian unstable (LP: #1806694). Remaining changes:
    - d/p/1dfc377ae3b174b043d3f0ed36de57b0296b34d0.patch: Cherrypick
      upstream commit to fix session resumption with TLS 1.3.
    - d/p/rubygems-2388.patch: Allow either Fetcher or OpenSSL exceptions
      when using invalid cert in rubygems testcase.
    - various backports for better openssl support (formerly undocumented in
      changelog)
      + d/p/0001-openssl-buffering.rb-no-RS-when-output.patch
      + d/p/0006-Workaround-for-old-LibreSSL.patch
  * Dropped changes
    - various backports for better openssl support (formerly undocumented in
      changelog, but upstream now)
      + d/p/0002-no-ID-cache-in-Init-functions.patch
      + d/p/0003-search-winsock-libraries-explicitly.patch
      + d/p/0004-openssl-search-winsock.patch
      + d/p/0007-openssl_missing.h-constified.patch
      + d/p/0008-reduce-LibreSSL-warnings.patch
      + d/p/0009-openssl-sync-with-upstream-repository.patch
    - SECURITY UPDATE: Name equality check CVE-2018-16395 (in upstream)
    - SECURITY UPDATE: Tainted flags not propagted CVE-2018-16396 (in upstream)
    - 0012-test-time-tzdata-2018f.patch: Adjust tz tests for new tzdata.

ruby2.5 (2.5.3-3) unstable; urgency=medium

  * arm64: also skip TestBugReporter#test_bug_reporter_add, which also fails~
    4% of the time.
  * mipsel: fix location of skiplist for OpenSSL::TestSSL, from TestSSL.rb to
    OpenSSL/TestSSL.rb.
  * Remove skiplist for OpenSSL::TestSSL on all architectures. It was in the
    wrong place to begin with.
  * Fix location of skiplist for Rinda-related tests.

ruby2.5 (2.5.3-2) unstable; urgency=medium

  * arm64: skip TestRubyOptions#test_segv_loaded_features, fails ~3% of the
    time
  * mipsel: skip OpenSSL::TestSSL tests that frequently timeout on the Debian
    buildds
    - test_dh_callback
    - test_get_ephemeral_key
    - test_post_connect_check_with_anon_ciphers

ruby2.5 (2.5.3-1) unstable; urgency=medium

  * New upstream version 2.5.3
    - Includes fix for CVE-2018-16396, "Tainted flags are not propagated in
      Array#pack and String#unpack with some directives" (Closes: #911920)
  * Refresh patches:
    - Dropped 0009-merge-changes-in-ruby-openssl-v2.1.1.patch, already applied
      upstream.
  * Add tzdata to Build-Depends (Closes: #911717)
  * Cherry-pick upstream commmit with update to tests due to changes in tzdata
    2018f (Closes: #913181)
  * Update gemspec reproducibility patch to also make new default gems fiddle
    and ipaddr reproducible. (Closes: #898051)
  * debian/rules: don't install created.rid file produced by rdoc to make
    build reproducible. This file is used by rdoc to decide when to update
    documentation when in use in interactive settings, and containing a
    timestamp is one of its functions. Is is not necessary for a binary
    package, though, because the included documentation will never need to be
    updated in-place.

Date: Tue, 04 Dec 2018 15:40:55 +0100
Changed-By: Christian Ehrhardt <christian.ehrhardt at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/ruby2.5/2.5.3-3ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 04 Dec 2018 15:40:55 +0100
Source: ruby2.5
Binary: ruby2.5 libruby2.5 ruby2.5-dev ruby2.5-doc
Architecture: source
Version: 2.5.3-3ubuntu1
Distribution: disco
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Christian Ehrhardt <christian.ehrhardt at canonical.com>
Description:
 libruby2.5 - Libraries necessary to run Ruby 2.5
 ruby2.5    - Interpreter of object-oriented scripting language Ruby
 ruby2.5-dev - Header files for compiling extension modules for the Ruby 2.5
 ruby2.5-doc - Documentation for Ruby 2.5
Closes: 898051 911717 911920 913181
Launchpad-Bugs-Fixed: 1806694
Changes:
 ruby2.5 (2.5.3-3ubuntu1) disco; urgency=medium
 .
   * Merge with Debian unstable (LP: #1806694). Remaining changes:
     - d/p/1dfc377ae3b174b043d3f0ed36de57b0296b34d0.patch: Cherrypick
       upstream commit to fix session resumption with TLS 1.3.
     - d/p/rubygems-2388.patch: Allow either Fetcher or OpenSSL exceptions
       when using invalid cert in rubygems testcase.
     - various backports for better openssl support (formerly undocumented in
       changelog)
       + d/p/0001-openssl-buffering.rb-no-RS-when-output.patch
       + d/p/0006-Workaround-for-old-LibreSSL.patch
   * Dropped changes
     - various backports for better openssl support (formerly undocumented in
       changelog, but upstream now)
       + d/p/0002-no-ID-cache-in-Init-functions.patch
       + d/p/0003-search-winsock-libraries-explicitly.patch
       + d/p/0004-openssl-search-winsock.patch
       + d/p/0007-openssl_missing.h-constified.patch
       + d/p/0008-reduce-LibreSSL-warnings.patch
       + d/p/0009-openssl-sync-with-upstream-repository.patch
     - SECURITY UPDATE: Name equality check CVE-2018-16395 (in upstream)
     - SECURITY UPDATE: Tainted flags not propagted CVE-2018-16396 (in upstream)
     - 0012-test-time-tzdata-2018f.patch: Adjust tz tests for new tzdata.
 .
 ruby2.5 (2.5.3-3) unstable; urgency=medium
 .
   * arm64: also skip TestBugReporter#test_bug_reporter_add, which also fails~
     4% of the time.
   * mipsel: fix location of skiplist for OpenSSL::TestSSL, from TestSSL.rb to
     OpenSSL/TestSSL.rb.
   * Remove skiplist for OpenSSL::TestSSL on all architectures. It was in the
     wrong place to begin with.
   * Fix location of skiplist for Rinda-related tests.
 .
 ruby2.5 (2.5.3-2) unstable; urgency=medium
 .
   * arm64: skip TestRubyOptions#test_segv_loaded_features, fails ~3% of the
     time
   * mipsel: skip OpenSSL::TestSSL tests that frequently timeout on the Debian
     buildds
     - test_dh_callback
     - test_get_ephemeral_key
     - test_post_connect_check_with_anon_ciphers
 .
 ruby2.5 (2.5.3-1) unstable; urgency=medium
 .
   * New upstream version 2.5.3
     - Includes fix for CVE-2018-16396, "Tainted flags are not propagated in
       Array#pack and String#unpack with some directives" (Closes: #911920)
   * Refresh patches:
     - Dropped 0009-merge-changes-in-ruby-openssl-v2.1.1.patch, already applied
       upstream.
   * Add tzdata to Build-Depends (Closes: #911717)
   * Cherry-pick upstream commmit with update to tests due to changes in tzdata
     2018f (Closes: #913181)
   * Update gemspec reproducibility patch to also make new default gems fiddle
     and ipaddr reproducible. (Closes: #898051)
   * debian/rules: don't install created.rid file produced by rdoc to make
     build reproducible. This file is used by rdoc to decide when to update
     documentation when in use in interactive settings, and containing a
     timestamp is one of its functions. Is is not necessary for a binary
     package, though, because the included documentation will never need to be
     updated in-place.
Checksums-Sha1:
 0208bd5ac185c484921fad2c4c74ff9c94225b05 2528 ruby2.5_2.5.3-3ubuntu1.dsc
 acfe8bd7820ca0a0ebee4d08a6200ce90b47ba95 10184868 ruby2.5_2.5.3.orig.tar.xz
 e18aae93c975f6d15d32dd08b8ad750faf19952b 120044 ruby2.5_2.5.3-3ubuntu1.debian.tar.xz
 66d8fa1c788daaa20df569099593850fda865898 7329 ruby2.5_2.5.3-3ubuntu1_source.buildinfo
Checksums-Sha256:
 d73ec81c174d79f658916e9e5d2bec87346df64cbd9f0e4ce00364bbc285d6b8 2528 ruby2.5_2.5.3-3ubuntu1.dsc
 4953ab3299b6feaec99f4fa1507f3b276951f4c1c99aa435b8e0b1b4afe38302 10184868 ruby2.5_2.5.3.orig.tar.xz
 a4f22177ef641e9eaf0a9e9d06886a48e4b85978627a5ce5f506a72dbb7223c1 120044 ruby2.5_2.5.3-3ubuntu1.debian.tar.xz
 0f1e10bdfe2fbeeb1a6a21b5aba34e299c3dbad30794106348b9bd2dbdb2c711 7329 ruby2.5_2.5.3-3ubuntu1_source.buildinfo
Files:
 0661469d27b82d9485e7f06f3f7295e8 2528 ruby optional ruby2.5_2.5.3-3ubuntu1.dsc
 dc21f9f1a5c327e0bb3520770b72d3f6 10184868 ruby optional ruby2.5_2.5.3.orig.tar.xz
 ccd65059f402cbaad8fb643bf49ae7db 120044 ruby optional ruby2.5_2.5.3-3ubuntu1.debian.tar.xz
 dc6096386a87262404a631848375a8cb 7329 ruby optional ruby2.5_2.5.3-3ubuntu1_source.buildinfo
Original-Maintainer: Debian Ruby Team <pkg-ruby-extras-maintainers at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
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=yML5
-----END PGP SIGNATURE-----

More information about the Disco-changes mailing list