Moderate: ruby:3.1 security update (Oracle Linux 8)

ruby
[3.1.7-145]
- Upgrade to Ruby 3.1.7.
Resolves: RHEL-55408
- Fix DoS vulnerability in REXML. (CVE-2024-39908)
Resolves: RHEL-57051
- Fix DoS vulnerability in REXML. (CVE-2024-43398)
Resolves: RHEL-56002

[3.1.5-144]
- Fix REXML ReDoS vulnerability. (CVE-2024-49761)
Resolves: RHEL-68520

[3.1.5-143]
- Upgrade to Ruby 3.1.5.
Resolves: RHEL-35748
- Fix buffer overread vulnerability in StringIO.
Resolves: RHEL-35749
- Fix RCE vulnerability with .rdoc_options in RDoc.
Resolves: RHEL-35750
- Fix arbitrary memory address read vulnerability with Regex search.
Resolves: RHEL-35751

[3.1.4-142]
- Upgrade to Ruby 3.1.4.
Resolves: RHEL-5584
- Fix HTTP response splitting in CGI.
Resolves: CVE-2021-33621
- Fix ReDos vulnerability in URI.
Resolves: CVE-2023-28755
Resolves: CVE-2023-36617
- Fix ReDos vulnerability in Time.
Resolves: CVE-2023-28756
- Make RDoc soft dependency in IRB.
Resolves: RHEL-5615

[3.1.2-141]
- Upgrade to Ruby 3.1.2.
Resolves: rhbz#2063772

[3.0.2-140]
- Fix rubygem-irb upgrade not working due to directory -> symlink conversion.
Resolves: rhbz#2010949

[3.0.2-139]
- Upgrade to Ruby 3.0.2.
Related: rhbz#1938942
- Fix command injection vulnerability in RDoc. (CVE-2021-31799)
- Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
(CVE-2021-31810)
- Fix StartTLS stripping vulnerability in Net::IMAP (CVE-2021-32066)
- Fix dependencies of gems with explicit source installed from a
different source. (CVE-2020-36327)
- Pass ldflags to gem install via CONFIGURE_ARGS.
The same comment on the changelog 3.0.1-138 was wrong.

[3.0.1-138]
- Upgrade to Ruby 3.0.1 by merging Fedora rawhide branch (commit: 6b2ff68).
* Add missing rubygem- prefix for bundled provide of 'connection_pool'.
* Pass ldflags to gem install via CONFIGURE_ARGS
* Remove IRB dependency from rubygem-rdoc.
* Fix flaky excon test suite.
* Properly support DWARF5 debug information.
Related: rhbz#1920533
* Bundle OpenSSL into StdLib.
* Fix SEGFAULT in rubygem-shoulda-matchers test suite.
* Provide gem.build_complete file for binary gems.
* Re-enable test suite.
* ruby-default-gems have to depend on rubygem(io-console) due to reline.
* Fix SEGFAULT preventing rubygem-unicode to build on armv7hl.
* Add support for reworked RubyGems plugins.
* Use proper path for plugin wrappers.
* Extract RSS and REXML into separate subpackages, because they were moved from
default gems to bundled gems.
* Drop Net::Telnet and XMLRPC packages, because they were dropped from Ruby.
Resolves: rhbz#1938942
- Fix FTBFS due to an incompatible load directive.

[2.7.3-136]
- Upgrade to Ruby 2.7.3.
Resolves: rhbz#1947938
- Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
contains leading zero
Resolves: rhbz#1944227

[2.7.2-135]
- Upgrade to Ruby 2.7.2.
- Avoid possible timeout errors in TestBugReporter#test_bug_reporter_add.

[2.7.1-133]
- Fix require behavior allowing to load libraries multiple times.
Resolves: rhbz#1842989
- Add ruby-default-gems dependency on irb.

[2.7.1-133]
- Ship racc binary.
Resolves: rhbz#1851388

[2.7.1-132]
- Update to Ruby 2.7.1 by merging Fedora master branch (commit: 2981648)
* Skip unstable tests on s390x.
* Skip JIT tests in RHEL 8.
Resolves: rhbz#1817135

[2.6.3-106]
- Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.
Resolves: rhbz#1727832
- Properly support %prerelease in %gemspec_ macros.
Related: rhbz#1672575

[2.6.3-105]
- Update to Ruby 2.6.3 by merging Fedora master branch (commit: 1cc2a49)
* Properly generate 'ruby(rubygems)' versioned dependencies.
* Extract composition of dependecy strings into helper.
* Loosen RDoc dependency.
* Upstream fix adding -C flag instead of changing directory for gem build.
* Remove obsolete Group tag
* Fix '.include =' support in openssl.cnf.
* Link IRB back to StdLib.
* Link IRB files instead of directories.
* Exclude irb.rb from ruby-libs.
Resolves: rhbz#1672575

[2.5.5-104]
- Update to Ruby 2.5.5.
* Remove Patch25: ruby-2.6.0-Update-for-tzdata-2018f.patch; subsumed
* Remove Patch11: ruby-2.6.0-Try-to-update-cert.patch; subsumed
* Remove Patch19: ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with
-TLS-1.3.patch; subsumed
Resolves: rhbz#1688758
- Don't ship .stp files when SystemTap support is disabled.
Related: rhbz#1657915
- Fix CovScan issues.
Resolves: rhbz#1628592

[2.5.3-103]
- Refresh expired certificates to fix FTBFS.

[2.5.3-102]
- Fix Tokyo TZ tests.

[2.5.3-101]
- Update to Ruby 2.5.3.
Resolves: rhbz#1643092

[2.5.1-100]
- Properly harden package using -fstack-protector-strong.
* ruby-2.6.0-configure-fstack-protector-strong.patch
Resolves: rhbz#1624168

[2.5.1-99]
- Additional OpenSSL 1.1.1 fixes.
* ruby-2.6.0-fix-test-failure-with-TLS-1.3-maint.patch
* ruby-2.6.0-config-support-include-directive.patch
* ruby-2.6.0-use-larger-keys-for-SSL-tests.patch
Related: rhbz#1616213

[2.5.1-99]
- Fix generated rdoc template issues.
* ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch
Resolves: rhbz#1612026

[2.5.1-97]
- Fix TLS 1.3 issues.
* ruby-2.6.0-fix-test-failure-with-TLS-1.3.patch
* ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with-TLS-1.3.patch
Related: rhbz#1616213

[2.5.1-96]
- turn off tests
- Related: bug#1614611

[2.5.1-96]
- Rebuild with fixed binutils

[2.5.1-95]
- Rebuild for new binutils

[2.5.1-94]
- Disable some test failing with OpenSSL 1.1.1.

[2.5.1-94]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[2.5.1-93]
- Add macros to edit files lists in .gemspec
(gemspec_add_file and gemspec_remove_file).

[2.5.1-93]
- Make %gemspec_{add,remove}_dep modify .gemspec provided by %setup macro.

[2.5.1-92]
- Conflict requirement needs to generate dependency.
- Stop using --with-setjmp-type=setjmp on aarch64 (rhbz#1545239).

[2.5.1-92]
- Update to Ruby 2.5.1.

[2.5.0-91]
- Don't force libraries used to build Ruby to its dependencies.
- Re-enable GMP dependency.

[2.5.0-90]
- Drop GMP dependency.