[pkgsrc/pkgsrc-2022Q2]: pkgsrc/time/ruby-tzinfo1 Pullup ticket #6661 - reques...

[spz <spz%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/a19aebdff8de
branches:  pkgsrc-2022Q2
changeset: 384399:a19aebdff8de
user:      spz <spz%pkgsrc.org@localhost>
date:      Sat Aug 27 16:23:07 2022 +0000

description:
Pullup ticket #6661 - requested by taca
time/ruby-tzinfo1: security update

Revisions pulled up:
- time/ruby-tzinfo1/Makefile                                    1.6
- time/ruby-tzinfo1/PLIST                                       1.3
- time/ruby-tzinfo1/distinfo                                    1.8

-------------------------------------------------------------------
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sat Jul 30 14:20:42 UTC 2022

   Modified Files:
        pkgsrc/time/ruby-tzinfo1: Makefile PLIST distinfo

   Log Message:
   time/ruby-tzinfo1: update to 1.2.10

   1.2.10 (2022-07-19)

   * Fixed a relative path traversal bug that could cause arbitrary files to be
     loaded with require when used with RubyDataSource.  Please refer to
     GHSA-5cm2-9h8c-rvfx for details. CVE-2022-31163.

   * Ignore the SECURITY file from Arch Linux's tzdata package. #134.


   To generate a diff of this commit:
   cvs rdiff -u -r1.5 -r1.6 pkgsrc/time/ruby-tzinfo1/Makefile
   cvs rdiff -u -r1.2 -r1.3 pkgsrc/time/ruby-tzinfo1/PLIST
   cvs rdiff -u -r1.7 -r1.8 pkgsrc/time/ruby-tzinfo1/distinfo

diffstat:

 time/ruby-tzinfo1/Makefile |  4 ++--
 time/ruby-tzinfo1/PLIST    |  3 ++-
 time/ruby-tzinfo1/distinfo |  8 ++++----
 3 files changed, 8 insertions(+), 7 deletions(-)

diffs (48 lines):

diff -r 5d73c21766e5 -r a19aebdff8de time/ruby-tzinfo1/Makefile
--- a/time/ruby-tzinfo1/Makefile        Sat Aug 27 16:15:17 2022 +0000
+++ b/time/ruby-tzinfo1/Makefile        Sat Aug 27 16:23:07 2022 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.5 2021/01/03 08:19:42 taca Exp $
+# $NetBSD: Makefile,v 1.5.12.1 2022/08/27 16:23:07 spz Exp $
 
 DISTNAME=      tzinfo-${VERS}
 PKGNAME=       ${RUBY_PKGPREFIX}-tzinfo1-${VERS}
@@ -11,7 +11,7 @@
 
 DEPENDS+=      ${RUBY_PKGPREFIX}-thread_safe>=0.1<1:../../misc/ruby-thread_safe
 
-VERS=          1.2.9
+VERS=          1.2.10
 USE_LANGUAGES= # none
 
 .include "../../lang/ruby/gem.mk"
diff -r 5d73c21766e5 -r a19aebdff8de time/ruby-tzinfo1/PLIST
--- a/time/ruby-tzinfo1/PLIST   Sat Aug 27 16:15:17 2022 +0000
+++ b/time/ruby-tzinfo1/PLIST   Sat Aug 27 16:23:07 2022 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.2 2020/11/10 14:30:00 taca Exp $
+@comment $NetBSD: PLIST,v 1.2.14.1 2022/08/27 16:23:07 spz Exp $
 ${GEM_HOME}/cache/${GEM_NAME}.gem
 ${GEM_LIBDIR}/.yardopts
 ${GEM_LIBDIR}/CHANGES.md
@@ -37,6 +37,7 @@
 ${GEM_LIBDIR}/lib/tzinfo/zoneinfo_country_info.rb
 ${GEM_LIBDIR}/lib/tzinfo/zoneinfo_data_source.rb
 ${GEM_LIBDIR}/lib/tzinfo/zoneinfo_timezone_info.rb
+${GEM_LIBDIR}/test/assets/payload.rb
 ${GEM_LIBDIR}/test/tc_annual_rules.rb
 ${GEM_LIBDIR}/test/tc_country.rb
 ${GEM_LIBDIR}/test/tc_country_index_definition.rb
diff -r 5d73c21766e5 -r a19aebdff8de time/ruby-tzinfo1/distinfo
--- a/time/ruby-tzinfo1/distinfo        Sat Aug 27 16:15:17 2022 +0000
+++ b/time/ruby-tzinfo1/distinfo        Sat Aug 27 16:23:07 2022 +0000
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.7 2021/10/26 11:24:37 nia Exp $
+$NetBSD: distinfo,v 1.7.6.1 2022/08/27 16:23:07 spz Exp $
 
-BLAKE2s (tzinfo-1.2.9.gem) = 45299f538f11425b031b20503ba9edd80680d4393eba58cda8252670a37e69c0
-SHA512 (tzinfo-1.2.9.gem) = ddf28ad213f681a4e551cbd803873b279acef03fae894a3e6475030d4da5a59732b31af5d5944e8c62d15b7ec922816fede24f180fb20c55c1bd3d379c879cfe
-Size (tzinfo-1.2.9.gem) = 166912 bytes
+BLAKE2s (tzinfo-1.2.10.gem) = 01e5941266e63c42eb039c54e82724a8cda1a2e74c98cf2b84c0b8b9274b6e07
+SHA512 (tzinfo-1.2.10.gem) = 124d43d92bdf9b234523ff79bb574d4be098cc721768eb1fd8ac85bff11ccfdf21effb1e4300e80c50b0202beed67a9a0d1146a23e33a4bced6e985fc6be78a2
+Size (tzinfo-1.2.10.gem) = 167936 bytes