CVS commit: pkgsrc/textproc/ruby-nokogiri

["Izumi Tsutsui" <tsutsui%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tsutsui
Date:           Sun Aug 10 03:35:39 UTC 2025

Modified Files:
        pkgsrc/textproc/ruby-nokogiri: Makefile PLIST distinfo

Log Message:
ruby-nokogiri: update to 1.18.9.

Upstream changes:
 https://github.com/sparklemotion/nokogiri/releases/tag/v1.18.9

v1.18.9 / 2025-07-20

Security

  * [CRuby] Applied upstream libxml2 patches to address CVE-2025-6021,
    CVE-2025-6170, CVE-2025-49794, CVE-2025-49795, and CVE-2025-49796.
    See GHSA-353f-x4gh-cqq8 for more information.


To generate a diff of this commit:
cvs rdiff -u -r1.104 -r1.105 pkgsrc/textproc/ruby-nokogiri/Makefile
cvs rdiff -u -r1.41 -r1.42 pkgsrc/textproc/ruby-nokogiri/PLIST
cvs rdiff -u -r1.72 -r1.73 pkgsrc/textproc/ruby-nokogiri/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/textproc/ruby-nokogiri/Makefile
diff -u pkgsrc/textproc/ruby-nokogiri/Makefile:1.104 pkgsrc/textproc/ruby-nokogiri/Makefile:1.105
--- pkgsrc/textproc/ruby-nokogiri/Makefile:1.104        Wed Jul  2 03:57:33 2025
+++ pkgsrc/textproc/ruby-nokogiri/Makefile      Sun Aug 10 03:35:39 2025
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.104 2025/07/02 03:57:33 markd Exp $
+# $NetBSD: Makefile,v 1.105 2025/08/10 03:35:39 tsutsui Exp $
 
-DISTNAME=      nokogiri-1.18.8
+DISTNAME=      nokogiri-1.18.9
 CATEGORIES=    textproc
 
 MAINTAINER=    tsutsui%NetBSD.org@localhost

Index: pkgsrc/textproc/ruby-nokogiri/PLIST
diff -u pkgsrc/textproc/ruby-nokogiri/PLIST:1.41 pkgsrc/textproc/ruby-nokogiri/PLIST:1.42
--- pkgsrc/textproc/ruby-nokogiri/PLIST:1.41    Mon Dec 30 10:54:46 2024
+++ pkgsrc/textproc/ruby-nokogiri/PLIST Sun Aug 10 03:35:39 2025
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.41 2024/12/30 10:54:46 tsutsui Exp $
+@comment $NetBSD: PLIST,v 1.42 2025/08/10 03:35:39 tsutsui Exp $
 bin/nokogiri${RUBY_SUFFIX}
 ${GEM_HOME}/cache/${GEM_NAME}.gem
 ${GEM_EXTSDIR}/gem.build_complete
@@ -179,5 +179,9 @@ ${GEM_LIBDIR}/patches/libxml2/0009-allow
 ${GEM_LIBDIR}/patches/libxml2/0010-update-config.guess-and-config.sub-for-libxml2.patch
 ${GEM_LIBDIR}/patches/libxml2/0011-rip-out-libxml2-s-libc_single_threaded-support.patch
 ${GEM_LIBDIR}/patches/libxml2/0019-xpath-Use-separate-static-hash-table-for-standard-fu.patch
+${GEM_LIBDIR}/patches/libxml2/0020-CVE-2025-6021-tree-Fix-integer-overflow-in-xmlBuildQ.patch
+${GEM_LIBDIR}/patches/libxml2/0021-CVE-2025-6170-Fix-potential-buffer-overflows-of-inte.patch
+${GEM_LIBDIR}/patches/libxml2/0022-CVE-2025-49795-schematron-Fix-null-pointer-dereferen.patch
+${GEM_LIBDIR}/patches/libxml2/0023-CVE-2025-49794-CVE-2025-49796-schematron-Fix-xmlSche.patch
 ${GEM_LIBDIR}/patches/libxslt/0001-update-config.guess-and-config.sub-for-libxslt.patch
 ${GEM_HOME}/specifications/${GEM_NAME}.gemspec

Index: pkgsrc/textproc/ruby-nokogiri/distinfo
diff -u pkgsrc/textproc/ruby-nokogiri/distinfo:1.72 pkgsrc/textproc/ruby-nokogiri/distinfo:1.73
--- pkgsrc/textproc/ruby-nokogiri/distinfo:1.72 Tue Apr 29 11:04:47 2025
+++ pkgsrc/textproc/ruby-nokogiri/distinfo      Sun Aug 10 03:35:39 2025
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.72 2025/04/29 11:04:47 tsutsui Exp $
+$NetBSD: distinfo,v 1.73 2025/08/10 03:35:39 tsutsui Exp $
 
-BLAKE2s (nokogiri-1.18.8.gem) = b7dd9643095d30a23fa9745ae2e40d02cfc8775ec082183bb91cc4d27ed92c79
-SHA512 (nokogiri-1.18.8.gem) = 972f5d3aba21a2e9baa373c19344dcc4fe6bc6190b1ae7b6eccd34af5d4be025df1172c57e25ae82b4b3e71d95fd418e5e7a8e981958da6ff34a240ea90a4040
-Size (nokogiri-1.18.8.gem) = 4363264 bytes
+BLAKE2s (nokogiri-1.18.9.gem) = 1970b9994b5136a381fb2ae9c2a1eedfa0c7fd057d584366d2923825c0b670e6
+SHA512 (nokogiri-1.18.9.gem) = 3d51fb952f5b63026c0753ccc81c6d553b0680b658f883e8fb13b53daf1374168997226ccbb696cef2d5d600a978ee9364959692d4d9586f77c8aee242c07241
+Size (nokogiri-1.18.9.gem) = 4369408 bytes