Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) (Client CN "mail.NetBSD.org", Issuer "mail.NetBSD.org CA" (not verified)) by mollari.NetBSD.org (Postfix) with ESMTPS id 2A1E41A921F for ; Tue, 12 Apr 2022 14:52:30 +0000 (UTC) Received: by mail.netbsd.org (Postfix, from userid 605) id 6053E84DB2; Tue, 12 Apr 2022 14:52:29 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 9919284D5F for ; Tue, 12 Apr 2022 14:52:28 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id sv3lnQvfJsFQ for ; Tue, 12 Apr 2022 14:52:27 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id BDC0584D47 for ; Tue, 12 Apr 2022 14:52:27 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id B6FF4FB24; Tue, 12 Apr 2022 14:52:27 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_164977514733540" MIME-Version: 1.0 Date: Tue, 12 Apr 2022 14:52:27 +0000 From: "Takahiro Kambe" Subject: CVS commit: pkgsrc/lang To: pkgsrc-changes@NetBSD.org Reply-To: taca@netbsd.org X-Mailer: log_accum Message-Id: <20220412145227.B6FF4FB24@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_164977514733540 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: taca Date: Tue Apr 12 14:52:27 UTC 2022 Modified Files: pkgsrc/lang/ruby: rubyversion.mk pkgsrc/lang/ruby30: Makefile pkgsrc/lang/ruby30-base: Makefile PLIST distinfo Log Message: lang/ruby30-base: update to 3.0.4 Ruby 3.0.4 has been released. This release includes security fixes. Please check the topics below for details. * CVE-2022-28738: Double free in Regexp compilation * CVE-2022-28739: Buffer overrun in String-to-Float conversion See the commit logs for further details. To generate a diff of this commit: cvs rdiff -u -r1.247 -r1.248 pkgsrc/lang/ruby/rubyversion.mk cvs rdiff -u -r1.2 -r1.3 pkgsrc/lang/ruby30/Makefile cvs rdiff -u -r1.5 -r1.6 pkgsrc/lang/ruby30-base/Makefile cvs rdiff -u -r1.6 -r1.7 pkgsrc/lang/ruby30-base/PLIST cvs rdiff -u -r1.7 -r1.8 pkgsrc/lang/ruby30-base/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_164977514733540 Content-Disposition: inline Content-Length: 6372 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/lang/ruby/rubyversion.mk diff -u pkgsrc/lang/ruby/rubyversion.mk:1.247 pkgsrc/lang/ruby/rubyversion.mk:1.248 --- pkgsrc/lang/ruby/rubyversion.mk:1.247 Tue Apr 12 14:21:00 2022 +++ pkgsrc/lang/ruby/rubyversion.mk Tue Apr 12 14:52:27 2022 @@ -1,4 +1,4 @@ -# $NetBSD: rubyversion.mk,v 1.247 2022/04/12 14:21:00 taca Exp $ +# $NetBSD: rubyversion.mk,v 1.248 2022/04/12 14:52:27 taca Exp $ # # This file determines which Ruby version is used as a dependency for @@ -215,7 +215,7 @@ RUBY_VERSION_REQD?= ${PKGNAME_REQD:C/rub # current supported Ruby's version RUBY26_VERSION= 2.6.10 RUBY27_VERSION= 2.7.6 -RUBY30_VERSION= 3.0.3 +RUBY30_VERSION= 3.0.4 RUBY31_VERSION= 3.1.1 # current API compatible version; used for version of shared library @@ -394,7 +394,7 @@ RUBY_ABBREV_VER= 0.1.0 RUBY_BASE64_VER= 0.1.0 RUBY_BENCHMARK_VER= 0.1.1 RUBY_BIGDECIMAL_VER= 3.0.0 -RUBY_BUNDLER_VER= 2.2.32 +RUBY_BUNDLER_VER= 2.2.33 RUBY_CGI_VER= 0.2.1 RUBY_CSV_VER= 3.1.9 RUBY_DATE_VER= 3.1.3 Index: pkgsrc/lang/ruby30/Makefile diff -u pkgsrc/lang/ruby30/Makefile:1.2 pkgsrc/lang/ruby30/Makefile:1.3 --- pkgsrc/lang/ruby30/Makefile:1.2 Fri Jan 14 16:16:44 2022 +++ pkgsrc/lang/ruby30/Makefile Tue Apr 12 14:52:27 2022 @@ -1,9 +1,8 @@ -# $NetBSD: Makefile,v 1.2 2022/01/14 16:16:44 taca Exp $ +# $NetBSD: Makefile,v 1.3 2022/04/12 14:52:27 taca Exp $ # DISTNAME= # empty PKGNAME= ${RUBY_PKGPREFIX}-${RUBY_VERSION} -PKGREVISION= 1 CATEGORIES= lang ruby MASTER_SITES= # empty DISTFILES= # empty Index: pkgsrc/lang/ruby30-base/Makefile diff -u pkgsrc/lang/ruby30-base/Makefile:1.5 pkgsrc/lang/ruby30-base/Makefile:1.6 --- pkgsrc/lang/ruby30-base/Makefile:1.5 Tue Jan 18 08:26:38 2022 +++ pkgsrc/lang/ruby30-base/Makefile Tue Apr 12 14:52:27 2022 @@ -1,8 +1,7 @@ -# $NetBSD: Makefile,v 1.5 2022/01/18 08:26:38 wiz Exp $ +# $NetBSD: Makefile,v 1.6 2022/04/12 14:52:27 taca Exp $ DISTNAME= ${RUBY_DISTNAME} PKGNAME= ${RUBY_PKGPREFIX}-base-${RUBY_VERSION} -PKGREVISION= 2 CATEGORIES= lang ruby MASTER_SITES= ${MASTER_SITE_RUBY} Index: pkgsrc/lang/ruby30-base/PLIST diff -u pkgsrc/lang/ruby30-base/PLIST:1.6 pkgsrc/lang/ruby30-base/PLIST:1.7 --- pkgsrc/lang/ruby30-base/PLIST:1.6 Fri Jan 14 16:16:07 2022 +++ pkgsrc/lang/ruby30-base/PLIST Tue Apr 12 14:52:27 2022 @@ -1,4 +1,4 @@ -@comment $NetBSD: PLIST,v 1.6 2022/01/14 16:16:07 taca Exp $ +@comment $NetBSD: PLIST,v 1.7 2022/04/12 14:52:27 taca Exp $ bin/bundle${RUBY_SUFFIX} bin/bundler${RUBY_SUFFIX} bin/erb${RUBY_SUFFIX} @@ -402,6 +402,7 @@ ${RUBY_LIB}/bundler/templates/newgem/lib ${RUBY_LIB}/bundler/templates/newgem/newgem.gemspec.tt ${RUBY_LIB}/bundler/templates/newgem/rspec.tt ${RUBY_LIB}/bundler/templates/newgem/rubocop.yml.tt +${RUBY_LIB}/bundler/templates/newgem/sig/newgem.rbs.tt ${RUBY_LIB}/bundler/templates/newgem/spec/newgem_spec.rb.tt ${RUBY_LIB}/bundler/templates/newgem/spec/spec_helper.rb.tt ${RUBY_LIB}/bundler/templates/newgem/standard.yml.tt @@ -415,11 +416,13 @@ ${RUBY_LIB}/bundler/ui/rg_proxy.rb ${RUBY_LIB}/bundler/ui/shell.rb ${RUBY_LIB}/bundler/ui/silent.rb ${RUBY_LIB}/bundler/uri_credentials_filter.rb +${RUBY_LIB}/bundler/vendor/connection_pool/LICENSE ${RUBY_LIB}/bundler/vendor/connection_pool/lib/connection_pool.rb ${RUBY_LIB}/bundler/vendor/connection_pool/lib/connection_pool/timed_stack.rb ${RUBY_LIB}/bundler/vendor/connection_pool/lib/connection_pool/version.rb ${RUBY_LIB}/bundler/vendor/connection_pool/lib/connection_pool/wrapper.rb ${RUBY_LIB}/bundler/vendor/fileutils/lib/fileutils.rb +${RUBY_LIB}/bundler/vendor/molinillo/LICENSE ${RUBY_LIB}/bundler/vendor/molinillo/lib/molinillo.rb ${RUBY_LIB}/bundler/vendor/molinillo/lib/molinillo/delegates/resolution_state.rb ${RUBY_LIB}/bundler/vendor/molinillo/lib/molinillo/delegates/specification_provider.rb @@ -444,6 +447,7 @@ ${RUBY_LIB}/bundler/vendor/net-http-pers ${RUBY_LIB}/bundler/vendor/net-http-persistent/lib/net/http/persistent/connection.rb ${RUBY_LIB}/bundler/vendor/net-http-persistent/lib/net/http/persistent/pool.rb ${RUBY_LIB}/bundler/vendor/net-http-persistent/lib/net/http/persistent/timed_stack_multi.rb +${RUBY_LIB}/bundler/vendor/thor/LICENSE.md ${RUBY_LIB}/bundler/vendor/thor/lib/thor.rb ${RUBY_LIB}/bundler/vendor/thor/lib/thor/actions.rb ${RUBY_LIB}/bundler/vendor/thor/lib/thor/actions/create_file.rb @@ -1035,6 +1039,7 @@ ${RUBY_LIB}/rubygems/mock_gem_ui.rb ${RUBY_LIB}/rubygems/name_tuple.rb ${RUBY_LIB}/rubygems/openssl.rb ${RUBY_LIB}/rubygems/optparse.rb +${RUBY_LIB}/rubygems/optparse/COPYING ${RUBY_LIB}/rubygems/optparse/lib/optionparser.rb ${RUBY_LIB}/rubygems/optparse/lib/optparse.rb ${RUBY_LIB}/rubygems/optparse/lib/optparse/ac.rb @@ -1092,6 +1097,7 @@ ${RUBY_LIB}/rubygems/resolver/local_spec ${RUBY_LIB}/rubygems/resolver/lock_set.rb ${RUBY_LIB}/rubygems/resolver/lock_specification.rb ${RUBY_LIB}/rubygems/resolver/molinillo.rb +${RUBY_LIB}/rubygems/resolver/molinillo/LICENSE ${RUBY_LIB}/rubygems/resolver/molinillo/lib/molinillo.rb ${RUBY_LIB}/rubygems/resolver/molinillo/lib/molinillo/delegates/resolution_state.rb ${RUBY_LIB}/rubygems/resolver/molinillo/lib/molinillo/delegates/specification_provider.rb Index: pkgsrc/lang/ruby30-base/distinfo diff -u pkgsrc/lang/ruby30-base/distinfo:1.7 pkgsrc/lang/ruby30-base/distinfo:1.8 --- pkgsrc/lang/ruby30-base/distinfo:1.7 Thu Nov 25 16:35:52 2021 +++ pkgsrc/lang/ruby30-base/distinfo Tue Apr 12 14:52:27 2022 @@ -1,8 +1,8 @@ -$NetBSD: distinfo,v 1.7 2021/11/25 16:35:52 taca Exp $ +$NetBSD: distinfo,v 1.8 2022/04/12 14:52:27 taca Exp $ -BLAKE2s (ruby-3.0.3.tar.xz) = 4c2e9044c837710b2378059e65b43e1124d6d142be065de6d87df179391f4442 -SHA512 (ruby-3.0.3.tar.xz) = bb9ea426278d5a7ac46595296f03b82d43df8b7db41045cdf85611e05e26c703c53f700494cd7cf5d4c27fa953bdc5c144317d7720812db0a6e3b6f4bc4d2e00 -Size (ruby-3.0.3.tar.xz) = 14991880 bytes +BLAKE2s (ruby-3.0.4.tar.xz) = 2487d6f4bd37ef20715935a50d2cc50f9d50589c9223836bfaa6c3ac7de57b4d +SHA512 (ruby-3.0.4.tar.xz) = 53bf7dd403b0c68af9691882ad8ed7422c8d1f496627428fb4c3caf0b0313715524b744c5f453aced2d49e16e55f3f45b46b9a77aa3097dbfcae7caa0208194b +Size (ruby-3.0.4.tar.xz) = 15830368 bytes SHA1 (patch-common.mk) = c23eed58427b2fd4ba8fdb3692f609701a666c6d SHA1 (patch-configure) = a56184876caac5c24b2c2925f364d88c3ebc5662 SHA1 (patch-ext_dbm_extconf.rb) = c998f8735db54b1ae2bc8b6caa359ce88bc7a45b --_----------=_164977514733540--