[arch] Ruby 1.8.5-p2 and dorphell still asleep

Michael Fellinger m.fellinger at gmail.com
Tue Dec 5 04:27:23 EST 2006


Hello there,

I've been mailing about the upgrade to ruby 1.8.5 last time, but it seems like 
it's been widely ignored...

However, in the meanwhile some serious security-issues have been found in ruby 
and yesterday the patch2 of 1.8.5 was released. These issues (and a couple 
more) are also found in earlier versions of ruby (like 1.8.4 that we are 
running right now).

I really want to encourage someone who has the neccesary power to give the 
ruby-package to someone who cares, dorphell just left this package rot since 
several months now.
http://archlinux.org/packages/search/?q=ruby
was flagged out of date since this summer.

I'm no TU or dev, so i cannot take care of it, but i'm sure someone of you 
guys will show mercy and take it over?

Below you can find the new PKGBUILD, the difference is that the version is now 
1.8.5-p2 (pkgver 1.8.5, rev 2 - downloadlink/directory need the appended -p2 
since it cannot be used in the pkgver) and that there is no manual patching 
neccesary anymore.

It is 99.9% backwards-compatible and there should be no breakage at all with 
apps that already run with 1.8.4

Most people who really care about ruby will have upgraded themselves by now 
anyway, but if someone is not very familiar with it and still runs rails or 
something it is a bad idea to run it without the patches.

thanks for your attention, i hope we can resolve this issue.
It's really bad (IMHO) to have such an important package that much out of 
date...

^manveru

========================= ruby/PKGBUILD =========================

# $Id: PKGBUILD,v 1.20 2005/02/22 22:09:43 dorphell Exp
# Maintainer: dorphell <dorphell at archlinux.org>
# Contributors: John Proctor <jproctor at prium.net>
#               Jeramy Rutley <jrutley at gmail.com>
pkgname=ruby
pkgver=1.8.5
pkgrel=2
pkgdesc="An object-oriented language for quick and easy programming"
url="http://www.ruby-lang.org/en/"
depends=('gdbm' 'db' 'openssl' 'zlib' 'readline')
source=(ftp://ftp.ruby-lang.org/pub/ruby/${pkgname}-${pkgver}-p2.tar.gz)
md5sums=('a3517a224716f79b14196adda3e88057')

build() {
  cd $startdir/src/$pkgname-$pkgver-p2
  ./configure --prefix=/usr --enable-shared --enable-pthread
  make || return 1
  make DESTDIR=${startdir}/pkg install
  #generate the ri docs
  make DESTDIR=${startdir}/pkg install-doc
}



More information about the arch mailing list