CVS commit: [pkgsrc-2018Q3] pkgsrc/lang

["S.P.Zeidler" <spz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   spz
Date:           Mon Oct 29 07:53:23 UTC 2018

Modified Files:
        pkgsrc/lang/ruby [pkgsrc-2018Q3]: rubyversion.mk
        pkgsrc/lang/ruby24-base [pkgsrc-2018Q3]: distinfo

Log Message:
Pullup ticket #5861 - requested by taca
lang/ruby: security update
lang/ruby24-base: security update

Revisions pulled up:
- lang/ruby/rubyversion.mk                                      1.196
- lang/ruby24-base/distinfo                                     1.10

-------------------------------------------------------------------
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Thu Oct 18 14:15:13 UTC 2018

   Modified Files:
        pkgsrc/lang/ruby: rubyversion.mk
        pkgsrc/lang/ruby24-base: distinfo

   Log Message:
   lang/ruby24-base: update to 2.4.5

   Ruby 2.4.5 Released

   Ruby 2.4.5 has been released.

   This release includes about 40 bug fixes after the previous release, and also
   includes several security fixes. Please check the topics below for details.

   * CVE-2018-16396: Tainted flags are not propagated in Array#pack and
     String#unpack with some directives

   * CVE-2018-16395: OpenSSL::X509::Name equality check does not work correctly
     See the commit logs for details.

   To generate a diff of this commit:
   cvs rdiff -u -r1.195 -r1.196 pkgsrc/lang/ruby/rubyversion.mk
   cvs rdiff -u -r1.9 -r1.10 pkgsrc/lang/ruby24-base/distinfo


To generate a diff of this commit:
cvs rdiff -u -r1.195 -r1.195.6.1 pkgsrc/lang/ruby/rubyversion.mk
cvs rdiff -u -r1.9 -r1.9.6.1 pkgsrc/lang/ruby24-base/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/ruby/rubyversion.mk
diff -u pkgsrc/lang/ruby/rubyversion.mk:1.195 pkgsrc/lang/ruby/rubyversion.mk:1.195.6.1
--- pkgsrc/lang/ruby/rubyversion.mk:1.195       Thu Mar 29 03:11:58 2018
+++ pkgsrc/lang/ruby/rubyversion.mk     Mon Oct 29 07:53:23 2018
@@ -1,4 +1,4 @@
-# $NetBSD: rubyversion.mk,v 1.195 2018/03/29 03:11:58 taca Exp $
+# $NetBSD: rubyversion.mk,v 1.195.6.1 2018/10/29 07:53:23 spz Exp $
 #
 
 # This file determines which Ruby version is used as a dependency for
@@ -216,7 +216,7 @@ RUBY_VERSION_REQD?= ${PKGNAME_REQD:C/rub
 # current supported Ruby's version
 RUBY22_VERSION=                2.2.10
 RUBY23_VERSION=                2.3.7
-RUBY24_VERSION=                2.4.4
+RUBY24_VERSION=                2.4.5
 RUBY25_VERSION=                2.5.1
 
 # current API compatible version; used for version of shared library
@@ -316,7 +316,7 @@ RUBY_JSON_VERSION=  2.0.4
 
 RUBY_BIGDECIMAL_VERSION=       1.3.2
 RUBY_IO_CONSOLE_VERSION=       0.4.6
-RUBY_OPENSSL_VERSION=          2.0.7
+RUBY_OPENSSL_VERSION=          2.0.9
 RUBY_PSYCH_VERSION=            2.2.2
 RUBY_DID_YOU_MEAN_VERSION=     1.1.0
 RUBY_MINITEST_VERSION=         5.10.1

Index: pkgsrc/lang/ruby24-base/distinfo
diff -u pkgsrc/lang/ruby24-base/distinfo:1.9 pkgsrc/lang/ruby24-base/distinfo:1.9.6.1
--- pkgsrc/lang/ruby24-base/distinfo:1.9        Thu Mar 29 03:04:47 2018
+++ pkgsrc/lang/ruby24-base/distinfo    Mon Oct 29 07:53:23 2018
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.9 2018/03/29 03:04:47 taca Exp $
+$NetBSD: distinfo,v 1.9.6.1 2018/10/29 07:53:23 spz Exp $
 
-SHA1 (ruby-2.4.4.tar.bz2) = 1cc548ba3eb821e29ab92ac13e1d5c7bf23b1526
-RMD160 (ruby-2.4.4.tar.bz2) = 38aacd0ef60f4927318bb06cc997304681638c1e
-SHA512 (ruby-2.4.4.tar.bz2) = ae632852a5f413561d8134e9ef3bb82adb37317696dd293ef92cb76709ecd45718f14116ecce35b12f1c2dd53ccae8dabc7a924a270072b697512d11f4922347
-Size (ruby-2.4.4.tar.bz2) = 12659705 bytes
+SHA1 (ruby-2.4.5.tar.bz2) = 0e1f184556507c22bc59054496c0af7cf28fb188
+RMD160 (ruby-2.4.5.tar.bz2) = 72478559b56856d77f2898148bfeb35f294c4dc1
+SHA512 (ruby-2.4.5.tar.bz2) = 7034fcaeaee41f14bc0ecce0d3d93bd1abe95310e1a0b95fac66eaba867adfb2bf7ba4d0d70d67a15ce8df16052dee405c38cdb18987602e64a2f701d37d3df0
+Size (ruby-2.4.5.tar.bz2) = 12667524 bytes
 SHA1 (patch-configure) = a4013e4674be0060d2b0d43569b7695f6df7b4a7
 SHA1 (patch-ext_dbm_extconf.rb) = c998f8735db54b1ae2bc8b6caa359ce88bc7a45b
 SHA1 (patch-lib_mkmf.rb) = 75d2261a8282a00cd5f811a5e629302d1667207e