CVS commit: [pkgsrc-2022Q2] pkgsrc/time/ruby-tzinfo1

["S.P.Zeidler" <spz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   spz
Date:           Sat Aug 27 16:23:07 UTC 2022

Modified Files:
        pkgsrc/time/ruby-tzinfo1 [pkgsrc-2022Q2]: Makefile PLIST distinfo

Log Message:
Pullup ticket #6661 - requested by taca
time/ruby-tzinfo1: security update

Revisions pulled up:
- time/ruby-tzinfo1/Makefile                                    1.6
- time/ruby-tzinfo1/PLIST                                       1.3
- time/ruby-tzinfo1/distinfo                                    1.8

-------------------------------------------------------------------
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sat Jul 30 14:20:42 UTC 2022

   Modified Files:
        pkgsrc/time/ruby-tzinfo1: Makefile PLIST distinfo

   Log Message:
   time/ruby-tzinfo1: update to 1.2.10

   1.2.10 (2022-07-19)

   * Fixed a relative path traversal bug that could cause arbitrary files to be
     loaded with require when used with RubyDataSource.  Please refer to
     GHSA-5cm2-9h8c-rvfx for details. CVE-2022-31163.

   * Ignore the SECURITY file from Arch Linux's tzdata package. #134.

   To generate a diff of this commit:
   cvs rdiff -u -r1.5 -r1.6 pkgsrc/time/ruby-tzinfo1/Makefile
   cvs rdiff -u -r1.2 -r1.3 pkgsrc/time/ruby-tzinfo1/PLIST
   cvs rdiff -u -r1.7 -r1.8 pkgsrc/time/ruby-tzinfo1/distinfo


To generate a diff of this commit:
cvs rdiff -u -r1.5 -r1.5.12.1 pkgsrc/time/ruby-tzinfo1/Makefile
cvs rdiff -u -r1.2 -r1.2.14.1 pkgsrc/time/ruby-tzinfo1/PLIST
cvs rdiff -u -r1.7 -r1.7.6.1 pkgsrc/time/ruby-tzinfo1/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/time/ruby-tzinfo1/Makefile
diff -u pkgsrc/time/ruby-tzinfo1/Makefile:1.5 pkgsrc/time/ruby-tzinfo1/Makefile:1.5.12.1
--- pkgsrc/time/ruby-tzinfo1/Makefile:1.5       Sun Jan  3 08:19:42 2021
+++ pkgsrc/time/ruby-tzinfo1/Makefile   Sat Aug 27 16:23:07 2022
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.5 2021/01/03 08:19:42 taca Exp $
+# $NetBSD: Makefile,v 1.5.12.1 2022/08/27 16:23:07 spz Exp $
 
 DISTNAME=      tzinfo-${VERS}
 PKGNAME=       ${RUBY_PKGPREFIX}-tzinfo1-${VERS}
@@ -11,7 +11,7 @@ LICENSE=      mit
 
 DEPENDS+=      ${RUBY_PKGPREFIX}-thread_safe>=0.1<1:../../misc/ruby-thread_safe
 
-VERS=          1.2.9
+VERS=          1.2.10
 USE_LANGUAGES= # none
 
 .include "../../lang/ruby/gem.mk"

Index: pkgsrc/time/ruby-tzinfo1/PLIST
diff -u pkgsrc/time/ruby-tzinfo1/PLIST:1.2 pkgsrc/time/ruby-tzinfo1/PLIST:1.2.14.1
--- pkgsrc/time/ruby-tzinfo1/PLIST:1.2  Tue Nov 10 14:30:00 2020
+++ pkgsrc/time/ruby-tzinfo1/PLIST      Sat Aug 27 16:23:07 2022
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.2 2020/11/10 14:30:00 taca Exp $
+@comment $NetBSD: PLIST,v 1.2.14.1 2022/08/27 16:23:07 spz Exp $
 ${GEM_HOME}/cache/${GEM_NAME}.gem
 ${GEM_LIBDIR}/.yardopts
 ${GEM_LIBDIR}/CHANGES.md
@@ -37,6 +37,7 @@ ${GEM_LIBDIR}/lib/tzinfo/transition_rule
 ${GEM_LIBDIR}/lib/tzinfo/zoneinfo_country_info.rb
 ${GEM_LIBDIR}/lib/tzinfo/zoneinfo_data_source.rb
 ${GEM_LIBDIR}/lib/tzinfo/zoneinfo_timezone_info.rb
+${GEM_LIBDIR}/test/assets/payload.rb
 ${GEM_LIBDIR}/test/tc_annual_rules.rb
 ${GEM_LIBDIR}/test/tc_country.rb
 ${GEM_LIBDIR}/test/tc_country_index_definition.rb

Index: pkgsrc/time/ruby-tzinfo1/distinfo
diff -u pkgsrc/time/ruby-tzinfo1/distinfo:1.7 pkgsrc/time/ruby-tzinfo1/distinfo:1.7.6.1
--- pkgsrc/time/ruby-tzinfo1/distinfo:1.7       Tue Oct 26 11:24:37 2021
+++ pkgsrc/time/ruby-tzinfo1/distinfo   Sat Aug 27 16:23:07 2022
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.7 2021/10/26 11:24:37 nia Exp $
+$NetBSD: distinfo,v 1.7.6.1 2022/08/27 16:23:07 spz Exp $
 
-BLAKE2s (tzinfo-1.2.9.gem) = 45299f538f11425b031b20503ba9edd80680d4393eba58cda8252670a37e69c0
-SHA512 (tzinfo-1.2.9.gem) = ddf28ad213f681a4e551cbd803873b279acef03fae894a3e6475030d4da5a59732b31af5d5944e8c62d15b7ec922816fede24f180fb20c55c1bd3d379c879cfe
-Size (tzinfo-1.2.9.gem) = 166912 bytes
+BLAKE2s (tzinfo-1.2.10.gem) = 01e5941266e63c42eb039c54e82724a8cda1a2e74c98cf2b84c0b8b9274b6e07
+SHA512 (tzinfo-1.2.10.gem) = 124d43d92bdf9b234523ff79bb574d4be098cc721768eb1fd8ac85bff11ccfdf21effb1e4300e80c50b0202beed67a9a0d1146a23e33a4bced6e985fc6be78a2
+Size (tzinfo-1.2.10.gem) = 167936 bytes