Introduce `Gem::UserInteraction#verbose` method as precondition to fix
2019-8321.
Fix escape sequence injection vulnerability in verbose.
Fix escape sequence injection vulnerability in gem owner.
2019-8322
Fix escape sequence injection vulnerability in API response handling.
2019-8323
Prohibit arbitrary code execution when installing a malicious gem.
2019-8324
Fix escape sequence injection vulnerability in errors.
2019-8325

Kill bundled certificates.
Add macros to edit files lists in .gemspec
Fix buffer under-read in String#unpack
2018-8778
Fix HTTP response splitting in WEBrick
2017-17742
Fix DoS by large request in WEBrick
2018-8777
Fix directory traversal by poisoned NULL byte in Dir.
2018-8780
Fix file and directory creation with directory traversal.
2018-6914
Fix socket creation by poisoned NULL byte.
2018-8779
Fix: return default path with nonexistent home dir
Fix flags not propagated in Array#pack and String#unpack.
2018-16396
Fix strictly interpret octal fields in tar headers.
2018-1000075
Fix a security error for duplicate files in a package.
2018-1000076
Enforce URL validation on spec homepage attribute.
2018-1000077
Mitigate XSS vulnerability in homepage attribute.
2018-1000078
Prevent Path Traversal issue during gem installation.
2018-1000079
Fix unsafe Object Deserialization Vulnerability in gem owner.
2018-1000074
Refresh expired certificates.
Fix path traversal when writing to a symlinked basedir outside of the root
2018-1000073

CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
2018-16395

Fix always passing WEBrick test.

Add Psych.safe_load
2017-0903
Disable Tokyo TZ tests broken by recen tzdata update.
2017-0903

Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
vulnerability.patch
2017-0903
Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
2017-0899
Fix a DOS vulernerability in the query command (CVE-2017-0900).
2017-0900
Fix a vulnerability in the gem installer that allowed a malicious gem
2017-0901).
2017-0901
Fix a DNS request hijacking vulnerability (CVE-2017-0902).
2017-0902
Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
2017-0898
Escape sequence injection vulnerability in the Basic
2017-10784).
2017-10784
Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
2017-14064
Command injection vulnerability in Net::FTP (CVE-2017-17405).
2017-17405
Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
2017-14033
Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
2017-17790).
2017-17790

Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
Add gemspec_add_dep and gemspec_remove_dep macros.
Extend 'gem_' macros for pre-release version support.
Make symlinks for json gem.

Fix hostname size limit

Fix missing declaration of 'rb_frame_last_func'

Apply previously unapplied patch #14

Rebase to Ruby 2.0.0-p648
DESTDIR.patch; subsumed
Remove tests depending on europe/moscow to avoid failures due to tzdata change
Add checks for systemtap, abrt hook and rubygems version
Fix significant hash table performance slowdown on ppc64le
Support in no_proxy for domain names with whitespaces and leading dots

Fix broken DNS Resolv when resolv.conf has option ndots > 1.

Rebased to Ruby 2.0.0-p598.
.gems.patch; subsumed
succ.patch; subsumed
Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
Fix for Proxy Realm feature.
Fix off-by-one stack-based buffer overflow in the encodes() function
2014-4975).

Add missing patch for new tzdata
Add missing patch for RFC 5649 in OpenSSL

Fix FTBFS with new tzdata
Fix FTBFS due to a support for RFC 5649 in OpenSSL

Add support for ppc64le arch.