CVS commit: pkgsrc/graphics/ruby-RMagick

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Thu Sep 24 04:31:57 UTC 2026

Modified Files:
        pkgsrc/graphics/ruby-RMagick: Makefile distinfo

Log Message:
graphics/ruby-RMagick: update to 7.1.5

7.1.5 (2026-09-23)

Important

More strings that ImageMagick would read from a file now raise ArgumentError.

Montage#title= and the caption, comment and label options, set through
Info#caption=, #comment=, #label= or Info#[]=, now reject a value whose
first non-blank character is @, as Image#polaroid has done since
7.1.4. ImageMagick read the file it named and put its contents into the
montage or into the metadata of the image being read.  These checks and the
one in Image#polaroid also reject a %[fx:@...], %[hex:@...] or %[pixel:@...]
escape, which ImageMagick 7 reads from the named file as well, and their
message now says the value "must not name a file with '@'".

Image#profile! now accepts only the profile formats of ImageMagick's META
coder (8BIM, APP1, EXIF, ICC, ICM, IPTC, XMP and their variants) and raises
ArgumentError for any other name.  It decoded the profile with the coder of
whatever name it was given, so a profile named msl copied from an uploaded
image ran as an MSL script.

Breaking Changes

* Accept only META profile formats in Image#profile! instead of decoding the
  profile with the coder of that name by @Watson1978 in #1873

* Reject a Montage#title beginning with '@' instead of reading that file by
  @Watson1978 in #1874

* Reject an Info#caption, #comment or #label value beginning with '@'
  instead of reading that file by @Watson1978 in #1875

* Also reject %[fx:@...], %[hex:@...] and %[pixel:@...] escapes where a
  value beginning with '@' is rejected by @Watson1978 in #1876

Bug Fixes

* Fix stack buffer overflow in Image#inspect with a long format name by
  @Watson1978 in #1877


To generate a diff of this commit:
cvs rdiff -u -r1.211 -r1.212 pkgsrc/graphics/ruby-RMagick/Makefile
cvs rdiff -u -r1.93 -r1.94 pkgsrc/graphics/ruby-RMagick/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/graphics/ruby-RMagick/Makefile
diff -u pkgsrc/graphics/ruby-RMagick/Makefile:1.211 pkgsrc/graphics/ruby-RMagick/Makefile:1.212
--- pkgsrc/graphics/ruby-RMagick/Makefile:1.211 Sun Sep  6 14:59:20 2026
+++ pkgsrc/graphics/ruby-RMagick/Makefile       Thu Sep 24 04:31:57 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.211 2026/09/06 14:59:20 taca Exp $
+# $NetBSD: Makefile,v 1.212 2026/09/24 04:31:57 taca Exp $
 
-DISTNAME=      rmagick-7.1.4
+DISTNAME=      rmagick-7.1.5
 PKGNAME=       ${RUBY_PKGPREFIX}-${DISTNAME:S/rmagick/RMagick/}
 CATEGORIES=    graphics
 

Index: pkgsrc/graphics/ruby-RMagick/distinfo
diff -u pkgsrc/graphics/ruby-RMagick/distinfo:1.93 pkgsrc/graphics/ruby-RMagick/distinfo:1.94
--- pkgsrc/graphics/ruby-RMagick/distinfo:1.93  Sun Sep  6 14:59:20 2026
+++ pkgsrc/graphics/ruby-RMagick/distinfo       Thu Sep 24 04:31:57 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.93 2026/09/06 14:59:20 taca Exp $
+$NetBSD: distinfo,v 1.94 2026/09/24 04:31:57 taca Exp $
 
-BLAKE2s (rmagick-7.1.4.gem) = 90bbf1272086d79e28e290c439f555b5f3df036d14f6547ad7ff9f1140b562bd
-SHA512 (rmagick-7.1.4.gem) = d903aaecc6e1bfdb07563616e3a5b18dec79501a6055d9016bd8755689157f4ed0eaef94a7285beaa43359140e80d7dac94c55cc34190ce98fa752bbbf56348d
-Size (rmagick-7.1.4.gem) = 267264 bytes
+BLAKE2s (rmagick-7.1.5.gem) = 7f1a13874262ac648f6862944a1e3edbfb22c9b82ff06ab54333dc670bc67ffd
+SHA512 (rmagick-7.1.5.gem) = 4d2caef1227c5ed6c38e9b67c2f4175d29deaa039e589dc58b2947d5652000fee5a403ee0a5df4b525c2f00b16cf2e888926f6f318b5c76f87f2c25825f302a3
+Size (rmagick-7.1.5.gem) = 269824 bytes