Sun Sep 23 13:49:00 2018 UTC ()
archivers/ruby-zip: update to 1.2.2

Various small bug fixes including CVE-2018-1000544 (absolute path
traversal).


(taca)
diff -r1.17 -r1.18 pkgsrc/archivers/ruby-zip/Makefile
diff -r1.12 -r1.13 pkgsrc/archivers/ruby-zip/PLIST
diff -r1.15 -r1.16 pkgsrc/archivers/ruby-zip/distinfo
cvs diff -r1.17 -r1.18 pkgsrc/archivers/ruby-zip/Makefile (expand / switch to unified diff)

--- pkgsrc/archivers/ruby-zip/Makefile 2017/03/11 15:34:46 1.17
+++ pkgsrc/archivers/ruby-zip/Makefile 2018/09/23 13:49:00 1.18
@@ -1,16 +1,16 @@ @@ -1,16 +1,16 @@
1# $NetBSD: Makefile,v 1.17 2017/03/11 15:34:46 taca Exp $ 1# $NetBSD: Makefile,v 1.18 2018/09/23 13:49:00 taca Exp $
2 2
3DISTNAME= rubyzip-1.2.1 3DISTNAME= rubyzip-1.2.2
4PKGNAME= ${RUBY_PKGPREFIX}-${DISTNAME:S/ruby//} 4PKGNAME= ${RUBY_PKGPREFIX}-${DISTNAME:S/ruby//}
5CATEGORIES= archivers 5CATEGORIES= archivers
6 6
7MAINTAINER= minskim@NetBSD.org 7MAINTAINER= minskim@NetBSD.org
8HOMEPAGE= https://github.com/aussiegeek/rubyzip 8HOMEPAGE= https://github.com/aussiegeek/rubyzip
9COMMENT= Ruby module for reading and writing zip files 9COMMENT= Ruby module for reading and writing zip files
10LICENSE= ruby-license 10LICENSE= ruby-license
11 11
12pre-configure: 12pre-configure:
13 ${CHMOD} -R -x ${WRKSRC}/Rakefile ${WRKSRC}/lib/zip/*.rb 13 ${CHMOD} -R -x ${WRKSRC}/Rakefile ${WRKSRC}/lib/zip/*.rb
14 14
15.include "../../lang/ruby/gem.mk" 15.include "../../lang/ruby/gem.mk"
16.include "../../mk/bsd.pkg.mk" 16.include "../../mk/bsd.pkg.mk"
cvs diff -r1.12 -r1.13 pkgsrc/archivers/ruby-zip/PLIST (expand / switch to unified diff)

--- pkgsrc/archivers/ruby-zip/PLIST 2016/03/08 13:50:17 1.12
+++ pkgsrc/archivers/ruby-zip/PLIST 2018/09/23 13:49:00 1.13
@@ -1,14 +1,14 @@ @@ -1,14 +1,14 @@
1@comment $NetBSD: PLIST,v 1.12 2016/03/08 13:50:17 taca Exp $ 1@comment $NetBSD: PLIST,v 1.13 2018/09/23 13:49:00 taca Exp $
2${GEM_HOME}/cache/${GEM_NAME}.gem 2${GEM_HOME}/cache/${GEM_NAME}.gem
3${GEM_LIBDIR}/README.md 3${GEM_LIBDIR}/README.md
4${GEM_LIBDIR}/Rakefile 4${GEM_LIBDIR}/Rakefile
5${GEM_LIBDIR}/TODO 5${GEM_LIBDIR}/TODO
6${GEM_LIBDIR}/lib/zip.rb 6${GEM_LIBDIR}/lib/zip.rb
7${GEM_LIBDIR}/lib/zip/central_directory.rb 7${GEM_LIBDIR}/lib/zip/central_directory.rb
8${GEM_LIBDIR}/lib/zip/compressor.rb 8${GEM_LIBDIR}/lib/zip/compressor.rb
9${GEM_LIBDIR}/lib/zip/constants.rb 9${GEM_LIBDIR}/lib/zip/constants.rb
10${GEM_LIBDIR}/lib/zip/crypto/encryption.rb 10${GEM_LIBDIR}/lib/zip/crypto/encryption.rb
11${GEM_LIBDIR}/lib/zip/crypto/null_encryption.rb 11${GEM_LIBDIR}/lib/zip/crypto/null_encryption.rb
12${GEM_LIBDIR}/lib/zip/crypto/traditional_encryption.rb 12${GEM_LIBDIR}/lib/zip/crypto/traditional_encryption.rb
13${GEM_LIBDIR}/lib/zip/decompressor.rb 13${GEM_LIBDIR}/lib/zip/decompressor.rb
14${GEM_LIBDIR}/lib/zip/deflater.rb 14${GEM_LIBDIR}/lib/zip/deflater.rb
@@ -51,30 +51,45 @@ ${GEM_LIBDIR}/test/basic_zip_file_test.r @@ -51,30 +51,45 @@ ${GEM_LIBDIR}/test/basic_zip_file_test.r
51${GEM_LIBDIR}/test/case_sensitivity_test.rb 51${GEM_LIBDIR}/test/case_sensitivity_test.rb
52${GEM_LIBDIR}/test/central_directory_entry_test.rb 52${GEM_LIBDIR}/test/central_directory_entry_test.rb
53${GEM_LIBDIR}/test/central_directory_test.rb 53${GEM_LIBDIR}/test/central_directory_test.rb
54${GEM_LIBDIR}/test/crypto/null_encryption_test.rb 54${GEM_LIBDIR}/test/crypto/null_encryption_test.rb
55${GEM_LIBDIR}/test/crypto/traditional_encryption_test.rb 55${GEM_LIBDIR}/test/crypto/traditional_encryption_test.rb
56${GEM_LIBDIR}/test/data/WarnInvalidDate.zip 56${GEM_LIBDIR}/test/data/WarnInvalidDate.zip
57${GEM_LIBDIR}/test/data/file1.txt 57${GEM_LIBDIR}/test/data/file1.txt
58${GEM_LIBDIR}/test/data/file1.txt.deflatedData 58${GEM_LIBDIR}/test/data/file1.txt.deflatedData
59${GEM_LIBDIR}/test/data/file2.txt 59${GEM_LIBDIR}/test/data/file2.txt
60${GEM_LIBDIR}/test/data/globTest.zip 60${GEM_LIBDIR}/test/data/globTest.zip
61${GEM_LIBDIR}/test/data/globTest/foo.txt 61${GEM_LIBDIR}/test/data/globTest/foo.txt
62${GEM_LIBDIR}/test/data/globTest/foo/bar/baz/foo.txt 62${GEM_LIBDIR}/test/data/globTest/foo/bar/baz/foo.txt
63${GEM_LIBDIR}/test/data/globTest/food.txt 63${GEM_LIBDIR}/test/data/globTest/food.txt
 64${GEM_LIBDIR}/test/data/gpbit3stored.zip
64${GEM_LIBDIR}/test/data/mimetype 65${GEM_LIBDIR}/test/data/mimetype
65${GEM_LIBDIR}/test/data/notzippedruby.rb 66${GEM_LIBDIR}/test/data/notzippedruby.rb
66${GEM_LIBDIR}/test/data/ntfs.zip 67${GEM_LIBDIR}/test/data/ntfs.zip
67${GEM_LIBDIR}/test/data/oddExtraField.zip 68${GEM_LIBDIR}/test/data/oddExtraField.zip
 69${GEM_LIBDIR}/test/data/path_traversal/Makefile
 70${GEM_LIBDIR}/test/data/path_traversal/jwilk/README.md
 71${GEM_LIBDIR}/test/data/path_traversal/jwilk/absolute1.zip
 72${GEM_LIBDIR}/test/data/path_traversal/jwilk/absolute2.zip
 73${GEM_LIBDIR}/test/data/path_traversal/jwilk/dirsymlink.zip
 74${GEM_LIBDIR}/test/data/path_traversal/jwilk/dirsymlink2a.zip
 75${GEM_LIBDIR}/test/data/path_traversal/jwilk/dirsymlink2b.zip
 76${GEM_LIBDIR}/test/data/path_traversal/jwilk/relative0.zip
 77${GEM_LIBDIR}/test/data/path_traversal/jwilk/relative2.zip
 78${GEM_LIBDIR}/test/data/path_traversal/jwilk/symlink.zip
 79${GEM_LIBDIR}/test/data/path_traversal/relative1.zip
 80${GEM_LIBDIR}/test/data/path_traversal/tuzovakaoff/README.md
 81${GEM_LIBDIR}/test/data/path_traversal/tuzovakaoff/absolutepath.zip
 82${GEM_LIBDIR}/test/data/path_traversal/tuzovakaoff/symlink.zip
68${GEM_LIBDIR}/test/data/rubycode.zip 83${GEM_LIBDIR}/test/data/rubycode.zip
69${GEM_LIBDIR}/test/data/rubycode2.zip 84${GEM_LIBDIR}/test/data/rubycode2.zip
70${GEM_LIBDIR}/test/data/test.xls 85${GEM_LIBDIR}/test/data/test.xls
71${GEM_LIBDIR}/test/data/testDirectory.bin 86${GEM_LIBDIR}/test/data/testDirectory.bin
72${GEM_LIBDIR}/test/data/zip64-sample.zip 87${GEM_LIBDIR}/test/data/zip64-sample.zip
73${GEM_LIBDIR}/test/data/zipWithDirs.zip 88${GEM_LIBDIR}/test/data/zipWithDirs.zip
74${GEM_LIBDIR}/test/data/zipWithEncryption.zip 89${GEM_LIBDIR}/test/data/zipWithEncryption.zip
75${GEM_LIBDIR}/test/deflater_test.rb 90${GEM_LIBDIR}/test/deflater_test.rb
76${GEM_LIBDIR}/test/encryption_test.rb 91${GEM_LIBDIR}/test/encryption_test.rb
77${GEM_LIBDIR}/test/entry_set_test.rb 92${GEM_LIBDIR}/test/entry_set_test.rb
78${GEM_LIBDIR}/test/entry_test.rb 93${GEM_LIBDIR}/test/entry_test.rb
79${GEM_LIBDIR}/test/errors_test.rb 94${GEM_LIBDIR}/test/errors_test.rb
80${GEM_LIBDIR}/test/extra_field_test.rb 95${GEM_LIBDIR}/test/extra_field_test.rb
@@ -88,20 +103,21 @@ ${GEM_LIBDIR}/test/filesystem/directory_ @@ -88,20 +103,21 @@ ${GEM_LIBDIR}/test/filesystem/directory_
88${GEM_LIBDIR}/test/filesystem/file_mutating_test.rb 103${GEM_LIBDIR}/test/filesystem/file_mutating_test.rb
89${GEM_LIBDIR}/test/filesystem/file_nonmutating_test.rb 104${GEM_LIBDIR}/test/filesystem/file_nonmutating_test.rb
90${GEM_LIBDIR}/test/filesystem/file_stat_test.rb 105${GEM_LIBDIR}/test/filesystem/file_stat_test.rb
91${GEM_LIBDIR}/test/gentestfiles.rb 106${GEM_LIBDIR}/test/gentestfiles.rb
92${GEM_LIBDIR}/test/inflater_test.rb 107${GEM_LIBDIR}/test/inflater_test.rb
93${GEM_LIBDIR}/test/input_stream_test.rb 108${GEM_LIBDIR}/test/input_stream_test.rb
94${GEM_LIBDIR}/test/ioextras/abstract_input_stream_test.rb 109${GEM_LIBDIR}/test/ioextras/abstract_input_stream_test.rb
95${GEM_LIBDIR}/test/ioextras/abstract_output_stream_test.rb 110${GEM_LIBDIR}/test/ioextras/abstract_output_stream_test.rb
96${GEM_LIBDIR}/test/ioextras/fake_io_test.rb 111${GEM_LIBDIR}/test/ioextras/fake_io_test.rb
97${GEM_LIBDIR}/test/local_entry_test.rb 112${GEM_LIBDIR}/test/local_entry_test.rb
98${GEM_LIBDIR}/test/output_stream_test.rb 113${GEM_LIBDIR}/test/output_stream_test.rb
99${GEM_LIBDIR}/test/pass_thru_compressor_test.rb 114${GEM_LIBDIR}/test/pass_thru_compressor_test.rb
100${GEM_LIBDIR}/test/pass_thru_decompressor_test.rb 115${GEM_LIBDIR}/test/pass_thru_decompressor_test.rb
 116${GEM_LIBDIR}/test/path_traversal_test.rb
101${GEM_LIBDIR}/test/samples/example_recursive_test.rb 117${GEM_LIBDIR}/test/samples/example_recursive_test.rb
102${GEM_LIBDIR}/test/settings_test.rb 118${GEM_LIBDIR}/test/settings_test.rb
103${GEM_LIBDIR}/test/test_helper.rb 119${GEM_LIBDIR}/test/test_helper.rb
104${GEM_LIBDIR}/test/unicode_file_names_and_comments_test.rb 120${GEM_LIBDIR}/test/unicode_file_names_and_comments_test.rb
105${GEM_LIBDIR}/test/zip64_full_test.rb 121${GEM_LIBDIR}/test/zip64_full_test.rb
106${GEM_LIBDIR}/test/zip64_support_test.rb 122${GEM_LIBDIR}/test/zip64_support_test.rb
107${GEM_HOME}/specifications/${GEM_NAME}.gemspec 123${GEM_HOME}/specifications/${GEM_NAME}.gemspec
cvs diff -r1.15 -r1.16 pkgsrc/archivers/ruby-zip/distinfo (expand / switch to unified diff)

--- pkgsrc/archivers/ruby-zip/distinfo 2017/03/11 15:34:46 1.15
+++ pkgsrc/archivers/ruby-zip/distinfo 2018/09/23 13:49:00 1.16
@@ -1,6 +1,6 @@ @@ -1,6 +1,6 @@
1$NetBSD: distinfo,v 1.15 2017/03/11 15:34:46 taca Exp $ 1$NetBSD: distinfo,v 1.16 2018/09/23 13:49:00 taca Exp $
2 2
3SHA1 (rubyzip-1.2.1.gem) = 6db27c04c4051fdd163a759d294a66e89438ccbe 3SHA1 (rubyzip-1.2.2.gem) = c0e989661ce4e5cebf4c47e3e02a411521a55d1f
4RMD160 (rubyzip-1.2.1.gem) = 7706dd78f3f465d27b29971b28a6268a0dd3461f 4RMD160 (rubyzip-1.2.2.gem) = d8295b7e2ec075087499baf9685af09a55c051b0
5SHA512 (rubyzip-1.2.1.gem) = d2ce408dba3dfc6c005570504b58b11e3f3b17170734d34a1ce906c57e7f8c56beb856a1dbe66eeb854dd3d20a76108e347b9e596107d3693080d42a009eb95e 5SHA512 (rubyzip-1.2.2.gem) = 2adbf775e8480a90bd25de7fc9a4094079a7b1f81266a3866b163da47dcc5d5b08a39ec4e00f892212d3849bd8974ce9179b44c06d447d3b0f984dec305724b8
6Size (rubyzip-1.2.1.gem) = 149504 bytes 6Size (rubyzip-1.2.2.gem) = 152576 bytes