Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (1h)  pkgsrc-2024Q1 (10d)  pkgsrc-2023Q4 (57d)  pkgsrc-2023Q2 (89d)  pkgsrc-2023Q3 (169d) 

2024-05-28 06:03:37 UTC Now

2022-08-27 16:23:07 UTC pkgsrc-2022Q2 commitmail json YAML

Pullup ticket #6661 - requested by taca
time/ruby-tzinfo1: security update

Revisions pulled up:
- time/ruby-tzinfo1/Makefile                                    1.6
- time/ruby-tzinfo1/PLIST                                      1.3
- time/ruby-tzinfo1/distinfo                                    1.8

-------------------------------------------------------------------
  Module Name: pkgsrc
  Committed By: taca
  Date: Sat Jul 30 14:20:42 UTC 2022

  Modified Files:
  pkgsrc/time/ruby-tzinfo1: Makefile PLIST distinfo

  Log Message:
  time/ruby-tzinfo1: update to 1.2.10

  1.2.10 (2022-07-19)

  * Fixed a relative path traversal bug that could cause arbitrary files to be
    loaded with require when used with RubyDataSource.  Please refer to
    GHSA-5cm2-9h8c-rvfx for details. CVE-2022-31163.

  * Ignore the SECURITY file from Arch Linux's tzdata package. #134.

  To generate a diff of this commit:
  cvs rdiff -u -r1.5 -r1.6 pkgsrc/time/ruby-tzinfo1/Makefile
  cvs rdiff -u -r1.2 -r1.3 pkgsrc/time/ruby-tzinfo1/PLIST
  cvs rdiff -u -r1.7 -r1.8 pkgsrc/time/ruby-tzinfo1/distinfo

(spz)