CVS commit: pkgsrc/misc/rubygems

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Sun Sep  4 17:05:13 UTC 2011

Modified Files:
        pkgsrc/misc/rubygems: Makefile distinfo
        pkgsrc/misc/rubygems/patches: patch-aa

Log Message:
Update rubygems package to 1.8.10.

=== 1.8.10 / 2011-08-25

RubyGems 1.8.10 contains a security fix that prevents malicious gems from
executing code when their specification is loaded.  See
https://github.com/rubygems/rubygems/pull/165 for details.

* 5 bug fixes:

  * RubyGems escapes strings in ruby-format specs using #dump instead of #to_s
    and %q to prevent code injection.  Issue #165 by Postmodern
  * RubyGems attempt to activate the psych gem now to obtain bugfixes from
    psych.
  * Gem.dir has been restored to the front of Gem.path.  Fixes remaining
    problem with Issue #115
  * Fixed Syck DefaultKey infecting ruby-format specifications.
  * `gem uninstall a b` no longer stops if gem "a" is not installed.


To generate a diff of this commit:
cvs rdiff -u -r1.40 -r1.41 pkgsrc/misc/rubygems/Makefile
cvs rdiff -u -r1.30 -r1.31 pkgsrc/misc/rubygems/distinfo
cvs rdiff -u -r1.10 -r1.11 pkgsrc/misc/rubygems/patches/patch-aa

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.