Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) (Client CN "mail.NetBSD.org", Issuer "mail.NetBSD.org CA" (not verified)) by mollari.NetBSD.org (Postfix) with ESMTPS id E14D01A9239 for ; Thu, 25 Nov 2021 15:51:10 +0000 (UTC) Received: by mail.netbsd.org (Postfix, from userid 605) id 27A5284E76; Thu, 25 Nov 2021 15:51:10 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 629F184D79 for ; Thu, 25 Nov 2021 15:51:09 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([IPv6:::1]) by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025) with ESMTP id k6Cyaz-_hzgw for ; Thu, 25 Nov 2021 15:51:08 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id C368384CBC for ; Thu, 25 Nov 2021 15:51:08 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id BCDF8FAEC; Thu, 25 Nov 2021 15:51:08 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_163785546861430" MIME-Version: 1.0 Date: Thu, 25 Nov 2021 15:51:08 +0000 From: "Takahiro Kambe" Subject: CVS commit: pkgsrc/lang To: pkgsrc-changes@NetBSD.org Reply-To: taca@netbsd.org X-Mailer: log_accum Message-Id: <20211125155108.BCDF8FAEC@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_163785546861430 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: taca Date: Thu Nov 25 15:51:08 UTC 2021 Modified Files: pkgsrc/lang/ruby: rubyversion.mk pkgsrc/lang/ruby26-base: distinfo Log Message: lang/ruby26-base: update to 2.6.9 Ruby 2.6.9 Released Posted by usa on 24 Nov 2021 Ruby 2.6.9 has been released. This release includes security fixes. Please check the topics below for details. * CVE-2021-41817: Regular Expression Denial of Service Vulnerability of Date Parsing Methods * CVE-2021-41819: Cookie Prefix Spoofing in CGI::Cookie.parse See the commit logs for details. Ruby 2.6 is now under the state of the security maintenance phase, until the end of March of 2022. After that date, maintenance of Ruby 2.6 will be ended. We recommend you start planning the migration to newer versions of Ruby, such as 3.0 or 2.7. To generate a diff of this commit: cvs rdiff -u -r1.237 -r1.238 pkgsrc/lang/ruby/rubyversion.mk cvs rdiff -u -r1.14 -r1.15 pkgsrc/lang/ruby26-base/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_163785546861430 Content-Disposition: inline Content-Length: 2188 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/lang/ruby/rubyversion.mk diff -u pkgsrc/lang/ruby/rubyversion.mk:1.237 pkgsrc/lang/ruby/rubyversion.mk:1.238 --- pkgsrc/lang/ruby/rubyversion.mk:1.237 Sat Sep 25 00:47:26 2021 +++ pkgsrc/lang/ruby/rubyversion.mk Thu Nov 25 15:51:08 2021 @@ -1,4 +1,4 @@ -# $NetBSD: rubyversion.mk,v 1.237 2021/09/25 00:47:26 dholland Exp $ +# $NetBSD: rubyversion.mk,v 1.238 2021/11/25 15:51:08 taca Exp $ # # This file determines which Ruby version is used as a dependency for @@ -213,7 +213,7 @@ RUBY_VERSION_REQD?= ${PKGNAME_REQD:C/rub .endif # current supported Ruby's version -RUBY26_VERSION= 2.6.8 +RUBY26_VERSION= 2.6.9 RUBY27_VERSION= 2.7.4 RUBY30_VERSION= 3.0.2 @@ -286,7 +286,7 @@ RUBY_BIGDECIMAL_VERSION= 1.4.1 RUBY_BUNDLER_VERSION= 1.17.2 RUBY_CMATH_VERSION= 1.0.0 RUBY_CSV_VERSION= 3.0.9 -RUBY_DATE_VERSION= 2.0.0 +RUBY_DATE_VERSION= 2.0.2 RUBY_DBM_VERSION= 1.0.0 RUBY_E2MMAP_VERSION= 0.1.0 RUBY_ETC_VERSION= 1.0.1 Index: pkgsrc/lang/ruby26-base/distinfo diff -u pkgsrc/lang/ruby26-base/distinfo:1.14 pkgsrc/lang/ruby26-base/distinfo:1.15 --- pkgsrc/lang/ruby26-base/distinfo:1.14 Tue Nov 9 12:13:02 2021 +++ pkgsrc/lang/ruby26-base/distinfo Thu Nov 25 15:51:08 2021 @@ -1,8 +1,8 @@ -$NetBSD: distinfo,v 1.14 2021/11/09 12:13:02 jperkin Exp $ +$NetBSD: distinfo,v 1.15 2021/11/25 15:51:08 taca Exp $ -BLAKE2s (ruby-2.6.8.tar.xz) = b18e88618ba10d1f53894bea68bae833e842597a62114e3e2bc0fb20b56c62f3 -SHA512 (ruby-2.6.8.tar.xz) = d040ad2238523587d8f356fcb796b8b6ad7f8caff7dd6df09e3f7efcbfa0369e33600e78c7f2bc713ae77c040757cce5c4fec223cb9070209f2bf741899c556d -Size (ruby-2.6.8.tar.xz) = 11599488 bytes +BLAKE2s (ruby-2.6.9.tar.xz) = b353038621a51ee6b7cf8ef4b39b2df938438fc0a790673cb3bc43dd6894abf5 +SHA512 (ruby-2.6.9.tar.xz) = f60aa89e685cea324185eb0d13e6b44caef4e4f761cbf9ea1386ae70e39faf3866ac01e4bb5354574f2583e74290b8c80eaf63d126040d52368be6c771476451 +Size (ruby-2.6.9.tar.xz) = 11590064 bytes SHA1 (patch-configure) = ccfad7b5e35e87308e187e6c5fb3ffea57ad763d SHA1 (patch-ext_dbm_extconf.rb) = c998f8735db54b1ae2bc8b6caa359ce88bc7a45b SHA1 (patch-ext_openssl_ossl__pkey__rsa.c) = 707ab908b6d72e386230b3530700ce861a3754db --_----------=_163785546861430--