Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (20m)  pkgsrc-2024Q1 (10d)  pkgsrc-2023Q4 (57d)  pkgsrc-2023Q2 (89d)  pkgsrc-2023Q3 (169d) 

2024-05-27 19:28:10 UTC Now

2019-10-05 19:46:45 UTC pkgsrc-2019Q3 commitmail json YAML

Pullup ticket #6065 - requested by taca
lang/ruby25-base: security fix

Revisions pulled up:
- lang/ruby/rubyversion.mk                                      1.210
- lang/ruby25-base/Makefile                                    1.10
- lang/ruby25-base/distinfo                                    1.12
- lang/ruby25/Makefile                                          1.2

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Wed Oct  2 13:39:53 UTC 2019

  Modified Files:
  pkgsrc/lang/ruby: rubyversion.mk
  pkgsrc/lang/ruby25: Makefile
  pkgsrc/lang/ruby25-base: Makefile distinfo

  Log Message:
  lang/ruby25: update to 2.5.7

  Update ruby25-base, ruby25 and ruby25-mode packges to 2.5.7.

  pkgsrc chagnes

  * fix warnings of pkglint.

  Quote from release announce:

  Ruby 2.5.7 (2019-10-01)

  This release includes security fixes as listed below. Please check the
  topics below for details.

  * CVE-2019-16255: A code injection vulnerability of Shell#[] and Shell#test
  * CVE-2019-16254: HTTP response splitting in WEBrick (Additional fix)
  * CVE-2019-15845: A NUL injection vulnerability of File.fnmatch and
    File.fnmatch?
  * CVE-2019-16201: Regular Expression Denial of Service vulnerability of
    WEBrick's Digest access authentication

(bsiegert)