CVS commit: [pkgsrc-2018Q3] pkgsrc/www/ruby-loofah

["S.P.Zeidler" <spz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   spz
Date:           Sun Nov  4 20:02:38 UTC 2018

Modified Files:
        pkgsrc/www/ruby-loofah [pkgsrc-2018Q3]: Makefile PLIST distinfo

Log Message:
Pullup ticket #5874 - requested by taca
www/ruby-loofah: security update

Revisions pulled up:
- www/ruby-loofah/Makefile                                      1.5
- www/ruby-loofah/PLIST                                         1.4
- www/ruby-loofah/distinfo                                      1.5

-------------------------------------------------------------------
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Thu Nov  1 16:11:45 UTC 2018

   Modified Files:
        pkgsrc/www/ruby-loofah: Makefile PLIST distinfo

   Log Message:
   www/ruby-loofah: update to 2.2.3

   ## 2.2.3 / 2018-10-30

   ### Security

   Address CVE-2018-16468: Unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.

   This CVE's public notice is at https://github.com/flavorjones/loofah/issues/154

   ## Meta / 2018-10-27

   The mailing list is now on Google Groups [#146](https://github.com/flavorjones/loofah/issues/146):

   * Mail: loofah-talk%googlegroups.com@localhost
   * Archive: https://groups.google.com/forum/#!forum/loofah-talk

   This change was made because librelist no longer appears to be maintained.

   To generate a diff of this commit:
   cvs rdiff -u -r1.4 -r1.5 pkgsrc/www/ruby-loofah/Makefile \
       pkgsrc/www/ruby-loofah/distinfo
   cvs rdiff -u -r1.3 -r1.4 pkgsrc/www/ruby-loofah/PLIST


To generate a diff of this commit:
cvs rdiff -u -r1.4 -r1.4.6.1 pkgsrc/www/ruby-loofah/Makefile \
    pkgsrc/www/ruby-loofah/distinfo
cvs rdiff -u -r1.3 -r1.3.6.1 pkgsrc/www/ruby-loofah/PLIST

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/ruby-loofah/Makefile
diff -u pkgsrc/www/ruby-loofah/Makefile:1.4 pkgsrc/www/ruby-loofah/Makefile:1.4.6.1
--- pkgsrc/www/ruby-loofah/Makefile:1.4 Fri Mar 23 14:33:21 2018
+++ pkgsrc/www/ruby-loofah/Makefile     Sun Nov  4 20:02:38 2018
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.4 2018/03/23 14:33:21 taca Exp $
+# $NetBSD: Makefile,v 1.4.6.1 2018/11/04 20:02:38 spz Exp $
 
-DISTNAME=      loofah-2.2.2
+DISTNAME=      loofah-2.2.3
 CATEGORIES=    www
 
 MAINTAINER=    minskim%NetBSD.org@localhost
@@ -11,5 +11,7 @@ LICENSE=      mit
 DEPENDS+=      ${RUBY_PKGPREFIX}-nokogiri>=1.5.9:../../textproc/ruby-nokogiri
 DEPENDS+=      ${RUBY_PKGPREFIX}-crass>=1.0.2<1.1:../../www/ruby-crass
 
+USE_LANGUAGES= # none
+
 .include "../../lang/ruby/gem.mk"
 .include "../../mk/bsd.pkg.mk"
Index: pkgsrc/www/ruby-loofah/distinfo
diff -u pkgsrc/www/ruby-loofah/distinfo:1.4 pkgsrc/www/ruby-loofah/distinfo:1.4.6.1
--- pkgsrc/www/ruby-loofah/distinfo:1.4 Fri Mar 23 14:33:21 2018
+++ pkgsrc/www/ruby-loofah/distinfo     Sun Nov  4 20:02:38 2018
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.4 2018/03/23 14:33:21 taca Exp $
+$NetBSD: distinfo,v 1.4.6.1 2018/11/04 20:02:38 spz Exp $
 
-SHA1 (loofah-2.2.2.gem) = 6673a94800c0b179eb25d16fb0610d632eb87614
-RMD160 (loofah-2.2.2.gem) = 9c3b97665e35a74d2ea838d2a51324a2f4811575
-SHA512 (loofah-2.2.2.gem) = 3c64182f8fdb7d79a5be65969728c4c51a4535f53fdae7c8e5f4d487d43af3efac9d2f3746d8e02564d0979e94a0e63dc5974701c151e31c502cb8ff97f1295e
-Size (loofah-2.2.2.gem) = 65024 bytes
+SHA1 (loofah-2.2.3.gem) = b907029ec05b39a8f239a83c443e5cf94baecfad
+RMD160 (loofah-2.2.3.gem) = 7da4488ecc2a3c341a3716e0286e556b20bde270
+SHA512 (loofah-2.2.3.gem) = 8e63e1d4e3719c2ffcc8cf3208dbdfa3eb6e328bb91fc8dc6de88c472aac47f1a22771928b08f3c6816c159c6a9672299823f5d48177ae543358e73444b8ac56
+Size (loofah-2.2.3.gem) = 65536 bytes

Index: pkgsrc/www/ruby-loofah/PLIST
diff -u pkgsrc/www/ruby-loofah/PLIST:1.3 pkgsrc/www/ruby-loofah/PLIST:1.3.6.1
--- pkgsrc/www/ruby-loofah/PLIST:1.3    Wed Mar 21 12:09:39 2018
+++ pkgsrc/www/ruby-loofah/PLIST        Sun Nov  4 20:02:38 2018
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.3 2018/03/21 12:09:39 taca Exp $
+@comment $NetBSD: PLIST,v 1.3.6.1 2018/11/04 20:02:38 spz Exp $
 ${GEM_HOME}/cache/${GEM_NAME}.gem
 ${GEM_LIBDIR}/.gemtest
 ${GEM_LIBDIR}/CHANGELOG.md
@@ -26,6 +26,7 @@ ${GEM_LIBDIR}/lib/loofah/scrubber.rb
 ${GEM_LIBDIR}/lib/loofah/scrubbers.rb
 ${GEM_LIBDIR}/lib/loofah/xml/document.rb
 ${GEM_LIBDIR}/lib/loofah/xml/document_fragment.rb
+${GEM_LIBDIR}/test/assets/msword.html
 ${GEM_LIBDIR}/test/assets/testdata_sanitizer_tests1.dat
 ${GEM_LIBDIR}/test/helper.rb
 ${GEM_LIBDIR}/test/html5/test_sanitizer.rb