CVS commit: pkgsrc/www/ruby-rack

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Mon Feb 16 14:43:49 UTC 2026

Modified Files:
        pkgsrc/www/ruby-rack: Makefile distinfo

Log Message:
www/ruby-rack: update to 3.2.5

3.2.5 (2026-02-16)

Security

* CVE-2026-25500 XSS injection via malicious filename in Rack::Directory.
* CVE-2026-22860 Directory traversal via root prefix bypass in
  Rack::Directory.

Fixed

* Fix Rack::MockResponse#body when the body is a Proc. (#2420, #2423,
  @tavianator, @ioquatix)


To generate a diff of this commit:
cvs rdiff -u -r1.55 -r1.56 pkgsrc/www/ruby-rack/Makefile
cvs rdiff -u -r1.53 -r1.54 pkgsrc/www/ruby-rack/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/ruby-rack/Makefile
diff -u pkgsrc/www/ruby-rack/Makefile:1.55 pkgsrc/www/ruby-rack/Makefile:1.56
--- pkgsrc/www/ruby-rack/Makefile:1.55  Mon Nov  3 06:36:52 2025
+++ pkgsrc/www/ruby-rack/Makefile       Mon Feb 16 14:43:49 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.55 2025/11/03 06:36:52 taca Exp $
+# $NetBSD: Makefile,v 1.56 2026/02/16 14:43:49 taca Exp $
 
-DISTNAME=      rack-3.2.4
+DISTNAME=      rack-3.2.5
 CATEGORIES=    www
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost

Index: pkgsrc/www/ruby-rack/distinfo
diff -u pkgsrc/www/ruby-rack/distinfo:1.53 pkgsrc/www/ruby-rack/distinfo:1.54
--- pkgsrc/www/ruby-rack/distinfo:1.53  Mon Nov  3 06:36:52 2025
+++ pkgsrc/www/ruby-rack/distinfo       Mon Feb 16 14:43:49 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.53 2025/11/03 06:36:52 taca Exp $
+$NetBSD: distinfo,v 1.54 2026/02/16 14:43:49 taca Exp $
 
-BLAKE2s (rack-3.2.4.gem) = fb9850c883242050b630e307bfddf5055c40aea52404209814a966e0cd2224b5
-SHA512 (rack-3.2.4.gem) = 1fd00e2fb3bcb05886434c843648ad8d28b69e12321ecd058242f7a814e269ad8ec44d66d17ae079b3d1022b7b7473397718dd032a74a6eac5f64ce973c9fe82
-Size (rack-3.2.4.gem) = 118784 bytes
+BLAKE2s (rack-3.2.5.gem) = 2e36e40a865c7c65a1de64d76cc2c7b75c7f7cfd79be4b943f1ff329e9f63dcf
+SHA512 (rack-3.2.5.gem) = f425f526d7261f7d9f0c144840b9c4efe568ee6e44603e702f82843bcda176df1546437507bb6495995e204500457df41a12e4cf97425e7a14f35a3ce1248572
+Size (rack-3.2.5.gem) = 119296 bytes