[pkgsrc/pkgsrc-2018Q3]: pkgsrc/lang Pullup ticket #5861 - requested by taca

[spz <spz%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/70bae1b8e9f6
branches:  pkgsrc-2018Q3
changeset: 408357:70bae1b8e9f6
user:      spz <spz%pkgsrc.org@localhost>
date:      Mon Oct 29 07:53:23 2018 +0000

description:
Pullup ticket #5861 - requested by taca
lang/ruby: security update
lang/ruby24-base: security update

Revisions pulled up:
- lang/ruby/rubyversion.mk                                      1.196
- lang/ruby24-base/distinfo                                     1.10

-------------------------------------------------------------------
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Thu Oct 18 14:15:13 UTC 2018

   Modified Files:
        pkgsrc/lang/ruby: rubyversion.mk
        pkgsrc/lang/ruby24-base: distinfo

   Log Message:
   lang/ruby24-base: update to 2.4.5

   Ruby 2.4.5 Released

   Ruby 2.4.5 has been released.

   This release includes about 40 bug fixes after the previous release, and also
   includes several security fixes. Please check the topics below for details.

   * CVE-2018-16396: Tainted flags are not propagated in Array#pack and
     String#unpack with some directives

   * CVE-2018-16395: OpenSSL::X509::Name equality check does not work correctly
     See the commit logs for details.


   To generate a diff of this commit:
   cvs rdiff -u -r1.195 -r1.196 pkgsrc/lang/ruby/rubyversion.mk
   cvs rdiff -u -r1.9 -r1.10 pkgsrc/lang/ruby24-base/distinfo

diffstat:

 lang/ruby/rubyversion.mk  |   6 +++---
 lang/ruby24-base/distinfo |  10 +++++-----
 2 files changed, 8 insertions(+), 8 deletions(-)

diffs (45 lines):

diff -r 171d1f9b7e36 -r 70bae1b8e9f6 lang/ruby/rubyversion.mk
--- a/lang/ruby/rubyversion.mk  Fri Oct 26 17:55:37 2018 +0000
+++ b/lang/ruby/rubyversion.mk  Mon Oct 29 07:53:23 2018 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: rubyversion.mk,v 1.195 2018/03/29 03:11:58 taca Exp $
+# $NetBSD: rubyversion.mk,v 1.195.6.1 2018/10/29 07:53:23 spz Exp $
 #
 
 # This file determines which Ruby version is used as a dependency for
@@ -216,7 +216,7 @@
 # current supported Ruby's version
 RUBY22_VERSION=                2.2.10
 RUBY23_VERSION=                2.3.7
-RUBY24_VERSION=                2.4.4
+RUBY24_VERSION=                2.4.5
 RUBY25_VERSION=                2.5.1
 
 # current API compatible version; used for version of shared library
@@ -316,7 +316,7 @@
 
 RUBY_BIGDECIMAL_VERSION=       1.3.2
 RUBY_IO_CONSOLE_VERSION=       0.4.6
-RUBY_OPENSSL_VERSION=          2.0.7
+RUBY_OPENSSL_VERSION=          2.0.9
 RUBY_PSYCH_VERSION=            2.2.2
 RUBY_DID_YOU_MEAN_VERSION=     1.1.0
 RUBY_MINITEST_VERSION=         5.10.1
diff -r 171d1f9b7e36 -r 70bae1b8e9f6 lang/ruby24-base/distinfo
--- a/lang/ruby24-base/distinfo Fri Oct 26 17:55:37 2018 +0000
+++ b/lang/ruby24-base/distinfo Mon Oct 29 07:53:23 2018 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.9 2018/03/29 03:04:47 taca Exp $
+$NetBSD: distinfo,v 1.9.6.1 2018/10/29 07:53:23 spz Exp $
 
-SHA1 (ruby-2.4.4.tar.bz2) = 1cc548ba3eb821e29ab92ac13e1d5c7bf23b1526
-RMD160 (ruby-2.4.4.tar.bz2) = 38aacd0ef60f4927318bb06cc997304681638c1e
-SHA512 (ruby-2.4.4.tar.bz2) = ae632852a5f413561d8134e9ef3bb82adb37317696dd293ef92cb76709ecd45718f14116ecce35b12f1c2dd53ccae8dabc7a924a270072b697512d11f4922347
-Size (ruby-2.4.4.tar.bz2) = 12659705 bytes
+SHA1 (ruby-2.4.5.tar.bz2) = 0e1f184556507c22bc59054496c0af7cf28fb188
+RMD160 (ruby-2.4.5.tar.bz2) = 72478559b56856d77f2898148bfeb35f294c4dc1
+SHA512 (ruby-2.4.5.tar.bz2) = 7034fcaeaee41f14bc0ecce0d3d93bd1abe95310e1a0b95fac66eaba867adfb2bf7ba4d0d70d67a15ce8df16052dee405c38cdb18987602e64a2f701d37d3df0
+Size (ruby-2.4.5.tar.bz2) = 12667524 bytes
 SHA1 (patch-configure) = a4013e4674be0060d2b0d43569b7695f6df7b4a7
 SHA1 (patch-ext_dbm_extconf.rb) = c998f8735db54b1ae2bc8b6caa359ce88bc7a45b
 SHA1 (patch-lib_mkmf.rb) = 75d2261a8282a00cd5f811a5e629302d1667207e