pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/www/ruby-loofah www/ruby-loofah: update to 2.2.1



details:   https://anonhg.NetBSD.org/pkgsrc/rev/ae6ec95699a9
branches:  trunk
changeset: 377681:ae6ec95699a9
user:      taca <taca%pkgsrc.org@localhost>
date:      Wed Mar 21 12:09:39 2018 +0000

description:
www/ruby-loofah: update to 2.2.1

## 2.2.1 / 2018-03-19

Addresses CVE-2018-8048. Loofah allowed non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments.

This CVE's public notice is at https://github.com/flavorjones/loofah/issues/144

diffstat:

 www/ruby-loofah/Makefile |   4 ++--
 www/ruby-loofah/PLIST    |   4 +++-
 www/ruby-loofah/distinfo |  10 +++++-----
 3 files changed, 10 insertions(+), 8 deletions(-)

diffs (52 lines):

diff -r 272a529014f6 -r ae6ec95699a9 www/ruby-loofah/Makefile
--- a/www/ruby-loofah/Makefile  Wed Mar 21 12:08:02 2018 +0000
+++ b/www/ruby-loofah/Makefile  Wed Mar 21 12:09:39 2018 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.2 2018/03/17 16:21:48 taca Exp $
+# $NetBSD: Makefile,v 1.3 2018/03/21 12:09:39 taca Exp $
 
-DISTNAME=      loofah-2.2.0
+DISTNAME=      loofah-2.2.1
 CATEGORIES=    www
 
 MAINTAINER=    minskim%NetBSD.org@localhost
diff -r 272a529014f6 -r ae6ec95699a9 www/ruby-loofah/PLIST
--- a/www/ruby-loofah/PLIST     Wed Mar 21 12:08:02 2018 +0000
+++ b/www/ruby-loofah/PLIST     Wed Mar 21 12:09:39 2018 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.2 2018/03/17 16:21:48 taca Exp $
+@comment $NetBSD: PLIST,v 1.3 2018/03/21 12:09:39 taca Exp $
 ${GEM_HOME}/cache/${GEM_NAME}.gem
 ${GEM_LIBDIR}/.gemtest
 ${GEM_LIBDIR}/CHANGELOG.md
@@ -7,6 +7,7 @@
 ${GEM_LIBDIR}/Manifest.txt
 ${GEM_LIBDIR}/README.md
 ${GEM_LIBDIR}/Rakefile
+${GEM_LIBDIR}/SECURITY.md
 ${GEM_LIBDIR}/benchmark/benchmark.rb
 ${GEM_LIBDIR}/benchmark/fragment.html
 ${GEM_LIBDIR}/benchmark/helper.rb
@@ -16,6 +17,7 @@
 ${GEM_LIBDIR}/lib/loofah/helpers.rb
 ${GEM_LIBDIR}/lib/loofah/html/document.rb
 ${GEM_LIBDIR}/lib/loofah/html/document_fragment.rb
+${GEM_LIBDIR}/lib/loofah/html5/libxml2_workarounds.rb
 ${GEM_LIBDIR}/lib/loofah/html5/scrub.rb
 ${GEM_LIBDIR}/lib/loofah/html5/whitelist.rb
 ${GEM_LIBDIR}/lib/loofah/instance_methods.rb
diff -r 272a529014f6 -r ae6ec95699a9 www/ruby-loofah/distinfo
--- a/www/ruby-loofah/distinfo  Wed Mar 21 12:08:02 2018 +0000
+++ b/www/ruby-loofah/distinfo  Wed Mar 21 12:09:39 2018 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.2 2018/03/17 16:21:48 taca Exp $
+$NetBSD: distinfo,v 1.3 2018/03/21 12:09:39 taca Exp $
 
-SHA1 (loofah-2.2.0.gem) = f88958f42507da6fa611b66677e817c78ee6d987
-RMD160 (loofah-2.2.0.gem) = 4ae199c042e7cb6c18e8c4c219e0e36dd052cc6f
-SHA512 (loofah-2.2.0.gem) = cfee8bb8c138fb76b8fbbf76c3962729711bd1d69bac6eb3fb1b25e0677f9da83b906b4b8f031a92d7780ce43d55bcdec4584dd9a12a9e4d7efc07db0484362e
-Size (loofah-2.2.0.gem) = 62464 bytes
+SHA1 (loofah-2.2.1.gem) = 124094ccdb70f8ed7dbc899c828e5d902f3155c8
+RMD160 (loofah-2.2.1.gem) = cfb7ab71026d8952165ff316383653d8899f79af
+SHA512 (loofah-2.2.1.gem) = df971a1bee08f0ee0913af2b4b7baefa6d1ad04af82de796f6f0d505fab7749d52ce79db0118343d336bdae6fcfd4190fecb315019b2c821d81ac1c08d5b8e2a
+Size (loofah-2.2.1.gem) = 65024 bytes



Home | Main Index | Thread Index | Old Index