CVS commit: pkgsrc/security/ruby-rubyntlm

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Thu Sep 10 14:13:29 UTC 2026

Modified Files:
        pkgsrc/security/ruby-rubyntlm: Makefile PLIST distinfo

Log Message:
security/ruby-rubyntlm: update to 0.6.6

0.6.6 (2026-09-09)

* Security: fix NTLMv2 authentication bypass in Type3#password?, which
  verified NTLMv2 responses against an empty password instead of the
  supplied one

* Fix binary padding in the Ruby MD4 fallback so non-ASCII passwords hash
  correctly under OpenSSL 3


To generate a diff of this commit:
cvs rdiff -u -r1.4 -r1.5 pkgsrc/security/ruby-rubyntlm/Makefile
cvs rdiff -u -r1.2 -r1.3 pkgsrc/security/ruby-rubyntlm/PLIST
cvs rdiff -u -r1.6 -r1.7 pkgsrc/security/ruby-rubyntlm/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/ruby-rubyntlm/Makefile
diff -u pkgsrc/security/ruby-rubyntlm/Makefile:1.4 pkgsrc/security/ruby-rubyntlm/Makefile:1.5
--- pkgsrc/security/ruby-rubyntlm/Makefile:1.4  Sat Jun 15 16:13:14 2024
+++ pkgsrc/security/ruby-rubyntlm/Makefile      Thu Sep 10 14:13:29 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.4 2024/06/15 16:13:14 taca Exp $
+# $NetBSD: Makefile,v 1.5 2026/09/10 14:13:29 taca Exp $
 
-DISTNAME=      rubyntlm-0.6.5
+DISTNAME=      rubyntlm-0.6.6
 CATEGORIES=    security
 
 MAINTAINER=    minskim%NetBSD.org@localhost

Index: pkgsrc/security/ruby-rubyntlm/PLIST
diff -u pkgsrc/security/ruby-rubyntlm/PLIST:1.2 pkgsrc/security/ruby-rubyntlm/PLIST:1.3
--- pkgsrc/security/ruby-rubyntlm/PLIST:1.2     Sat Jun  8 15:55:25 2024
+++ pkgsrc/security/ruby-rubyntlm/PLIST Thu Sep 10 14:13:29 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.2 2024/06/08 15:55:25 taca Exp $
+@comment $NetBSD: PLIST,v 1.3 2026/09/10 14:13:29 taca Exp $
 ${GEM_HOME}/cache/${GEM_NAME}.gem
 ${GEM_LIBDIR}/.devcontainer/devcontainer.json
 ${GEM_LIBDIR}/.github/dependabot.yml
@@ -48,6 +48,7 @@ ${GEM_LIBDIR}/spec/lib/net/ntlm/field_sp
 ${GEM_LIBDIR}/spec/lib/net/ntlm/int16_le_spec.rb
 ${GEM_LIBDIR}/spec/lib/net/ntlm/int32_le_spec.rb
 ${GEM_LIBDIR}/spec/lib/net/ntlm/int64_le_spec.rb
+${GEM_LIBDIR}/spec/lib/net/ntlm/md4_spec.rb
 ${GEM_LIBDIR}/spec/lib/net/ntlm/message/type0_spec.rb
 ${GEM_LIBDIR}/spec/lib/net/ntlm/message/type1_spec.rb
 ${GEM_LIBDIR}/spec/lib/net/ntlm/message/type2_spec.rb

Index: pkgsrc/security/ruby-rubyntlm/distinfo
diff -u pkgsrc/security/ruby-rubyntlm/distinfo:1.6 pkgsrc/security/ruby-rubyntlm/distinfo:1.7
--- pkgsrc/security/ruby-rubyntlm/distinfo:1.6  Sat Jun 15 16:13:14 2024
+++ pkgsrc/security/ruby-rubyntlm/distinfo      Thu Sep 10 14:13:29 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.6 2024/06/15 16:13:14 taca Exp $
+$NetBSD: distinfo,v 1.7 2026/09/10 14:13:29 taca Exp $
 
-BLAKE2s (rubyntlm-0.6.5.gem) = 5f5c627ff14bbd97ebcfc0c02d54d42e62df5c605b760415b485e13111b5d1df
-SHA512 (rubyntlm-0.6.5.gem) = 6b55d06db1ce91600b858ace4304dc7b4d94158fb4389b4244aaf8857b9e32d16ac92a2052f6e235b1e47579e180959a257e0716892faa4a4c51b89e060193c0
-Size (rubyntlm-0.6.5.gem) = 36352 bytes
+BLAKE2s (rubyntlm-0.6.6.gem) = be752a045c8cf050f25b092dcbe27657ba0045c9c7fcc2c94752a4220a617213
+SHA512 (rubyntlm-0.6.6.gem) = f27725c26b7f9a5b2e9425360a44d2e4cf7caa06e84808294fabc816f3b7cf57e5a4b9cf15a239696afbaa84dc4a3a5c100c778d88028438651d0d9e070ad9d1
+Size (rubyntlm-0.6.6.gem) = 38400 bytes