CVS commit: [pkgsrc-2023Q1] pkgsrc/lang

["S.P.Zeidler" <spz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   spz
Date:           Sat Apr  1 19:39:42 UTC 2023

Modified Files:
        pkgsrc/lang/ruby [pkgsrc-2023Q1]: rubyversion.mk
        pkgsrc/lang/ruby27-base [pkgsrc-2023Q1]: distinfo

Log Message:
Pullup ticket #6745 - requested by taca
lang/ruby27-base: security update

Revisions pulled up:
- lang/ruby/rubyversion.mk                                      1.261
- lang/ruby27-base/distinfo                                     1.12

-------------------------------------------------------------------
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sat Apr  1 08:59:44 UTC 2023

   Modified Files:
        pkgsrc/lang/ruby: rubyversion.mk
        pkgsrc/lang/ruby27-base: distinfo

   Log Message:
   lang/ruby27: update to 2.7.8

   Ruby 2.7.8 Released                  Posted by usa on 30 Mar 2023

   Ruby 2.7.8 has been released.

   This release includes security fixes. Please check the topics below for
   details.

   * CVE-2023-28755: ReDoS vulnerability in URI
   * CVE-2023-28756: ReDoS vulnerability in Time

   This release also includes some build problem fixes. See the GitHub releases
   for further details.

   After this release, Ruby 2.7 reaches EOL.  In other words, this is expected
   to be the last release of Ruby 2.7 series.  We will not release Ruby 2.7.9
   even if a security vulnerability is found (but could release if a severe
   regression is found).  We recommend all Ruby 2.7 users to start migration to
   Ruby 3.2, 3.1, or 3.0 immediately.

   To generate a diff of this commit:
   cvs rdiff -u -r1.260 -r1.261 pkgsrc/lang/ruby/rubyversion.mk
   cvs rdiff -u -r1.11 -r1.12 pkgsrc/lang/ruby27-base/distinfo


To generate a diff of this commit:
cvs rdiff -u -r1.260 -r1.260.2.1 pkgsrc/lang/ruby/rubyversion.mk
cvs rdiff -u -r1.11 -r1.11.4.1 pkgsrc/lang/ruby27-base/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/ruby/rubyversion.mk
diff -u pkgsrc/lang/ruby/rubyversion.mk:1.260 pkgsrc/lang/ruby/rubyversion.mk:1.260.2.1
--- pkgsrc/lang/ruby/rubyversion.mk:1.260       Wed Feb  8 15:28:22 2023
+++ pkgsrc/lang/ruby/rubyversion.mk     Sat Apr  1 19:39:42 2023
@@ -1,4 +1,4 @@
-# $NetBSD: rubyversion.mk,v 1.260 2023/02/08 15:28:22 taca Exp $
+# $NetBSD: rubyversion.mk,v 1.260.2.1 2023/04/01 19:39:42 spz Exp $
 #
 
 # This file determines which Ruby version is used as a dependency for
@@ -213,7 +213,7 @@ RUBY_VERSION_REQD?= ${PKGNAME_REQD:C/rub
 .endif
 
 # current supported Ruby's version
-RUBY27_VERSION=                2.7.7
+RUBY27_VERSION=                2.7.8
 RUBY30_VERSION=                3.0.5
 RUBY31_VERSION=                3.1.3
 RUBY32_VERSION=                3.2.1
@@ -320,7 +320,7 @@ RUBY_STRINGIO_VER=          0.1.0
 RUBY_STRSCAN_VER=              1.0.3
 RUBY_TIMEOUT_VER=              0.1.0
 RUBY_TRACER_VER=               0.1.0
-RUBY_URI_VER=                  0.10.0
+RUBY_URI_VER=                  0.10.0.2
 RUBY_WEBRICK_VER=              1.6.1
 RUBY_YAML_VER=                 0.1.0
 RUBY_ZLIB_VER=                 1.1.0

Index: pkgsrc/lang/ruby27-base/distinfo
diff -u pkgsrc/lang/ruby27-base/distinfo:1.11 pkgsrc/lang/ruby27-base/distinfo:1.11.4.1
--- pkgsrc/lang/ruby27-base/distinfo:1.11       Sat Nov 26 13:09:58 2022
+++ pkgsrc/lang/ruby27-base/distinfo    Sat Apr  1 19:39:42 2023
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.11 2022/11/26 13:09:58 taca Exp $
+$NetBSD: distinfo,v 1.11.4.1 2023/04/01 19:39:42 spz Exp $
 
-BLAKE2s (ruby-2.7.7.tar.xz) = 4dc4c991e5799b1a67fcb18d73ddc4a43aafa1564eac9f8879698f9fb59a53ef
-SHA512 (ruby-2.7.7.tar.xz) = a19be3f0dfce040fe79f439e606f179d6750d2cc6e7b64fd65933edd487f5995573f7d0730beec9d3edadf942f8e9216f01ab3fff189d6cbe9d46a9add3e2683
-Size (ruby-2.7.7.tar.xz) = 12101804 bytes
+BLAKE2s (ruby-2.7.8.tar.xz) = 5c7612e54c361660f0f62d734bee78aac97256b843a0a09dc076d0c3ba5e5fa0
+SHA512 (ruby-2.7.8.tar.xz) = 4b49dff3e1c2e79d914e10418e4c03026f5d4c137dc337f5c720fe26cb9fcdcf4afc6b7c967356cf5fbe04cc5ef431174c48a035becf3e2322c2c45d3c9b2f59
+Size (ruby-2.7.8.tar.xz) = 12105320 bytes
 SHA1 (patch-configure) = 6f4b2abb5d22270ebcf211b4aa25d7efb6c0d2e9
 SHA1 (patch-ext_dbm_extconf.rb) = c998f8735db54b1ae2bc8b6caa359ce88bc7a45b
 SHA1 (patch-ext_openssl_ossl__pkey__rsa.c) = 925fa135abb90b9a1fa16da14b17c0d2b2bec364