CVS commit: [pkgsrc-2026Q3] pkgsrc/www/ruby-crass

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Wed Nov 11 10:42:53 UTC 2026

Modified Files:
        pkgsrc/www/ruby-crass [pkgsrc-2026Q3]: Makefile PLIST distinfo

Log Message:
Pullup ticket #7365 - requested by taca
www/ruby-crass: Security fix

Revisions pulled up:
- www/ruby-crass/Makefile                                       1.5
- www/ruby-crass/PLIST                                          1.4
- www/ruby-crass/distinfo                                       1.7

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sat Nov  7 15:44:33 UTC 2026

   Modified Files:
        pkgsrc/www/ruby-crass: Makefile PLIST distinfo

   Log Message:
   www/ruby-crass: update to 1.0.8

   1.0.8 (2026-10-21)

   Security

   * Moderate: Fixed a tokenizer bug in which a ) following an escaped
     backslash (\\) inside a bad URL didn't terminate the bad URL token,
     causing Crass to consume more input than a spec-compliant browser would.
     CSS sanitizers built on Crass could be tricked into passing through
     declarations, rules, or at-rules that a browser would then apply.
     (GHSA-pq4g-8rxf-4g29)


To generate a diff of this commit:
cvs rdiff -u -r1.4 -r1.4.2.1 pkgsrc/www/ruby-crass/Makefile
cvs rdiff -u -r1.3 -r1.3.2.1 pkgsrc/www/ruby-crass/PLIST
cvs rdiff -u -r1.6 -r1.6.2.1 pkgsrc/www/ruby-crass/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/ruby-crass/Makefile
diff -u pkgsrc/www/ruby-crass/Makefile:1.4 pkgsrc/www/ruby-crass/Makefile:1.4.2.1
--- pkgsrc/www/ruby-crass/Makefile:1.4  Sun Jun 28 15:21:40 2026
+++ pkgsrc/www/ruby-crass/Makefile      Wed Nov 11 10:42:52 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.4 2026/06/28 15:21:40 taca Exp $
+# $NetBSD: Makefile,v 1.4.2.1 2026/11/11 10:42:52 maya Exp $
 
-DISTNAME=      crass-1.0.7
+DISTNAME=      crass-1.0.8
 CATEGORIES=    www
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost

Index: pkgsrc/www/ruby-crass/PLIST
diff -u pkgsrc/www/ruby-crass/PLIST:1.3 pkgsrc/www/ruby-crass/PLIST:1.3.2.1
--- pkgsrc/www/ruby-crass/PLIST:1.3     Sun Jun 28 15:21:40 2026
+++ pkgsrc/www/ruby-crass/PLIST Wed Nov 11 10:42:53 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.3 2026/06/28 15:21:40 taca Exp $
+@comment $NetBSD: PLIST,v 1.3.2.1 2026/11/11 10:42:53 maya Exp $
 ${GEM_HOME}/cache/${GEM_NAME}.gem
 ${GEM_LIBDIR}/.github/workflows/tests.yml
 ${GEM_LIBDIR}/.gitignore
@@ -8,6 +8,7 @@ ${GEM_LIBDIR}/HISTORY.md
 ${GEM_LIBDIR}/LICENSE
 ${GEM_LIBDIR}/README.md
 ${GEM_LIBDIR}/Rakefile
+${GEM_LIBDIR}/SECURITY.md
 ${GEM_LIBDIR}/crass.gemspec
 ${GEM_LIBDIR}/lib/crass.rb
 ${GEM_LIBDIR}/lib/crass/parser.rb

Index: pkgsrc/www/ruby-crass/distinfo
diff -u pkgsrc/www/ruby-crass/distinfo:1.6 pkgsrc/www/ruby-crass/distinfo:1.6.2.1
--- pkgsrc/www/ruby-crass/distinfo:1.6  Sun Jun 28 15:21:40 2026
+++ pkgsrc/www/ruby-crass/distinfo      Wed Nov 11 10:42:53 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.6 2026/06/28 15:21:40 taca Exp $
+$NetBSD: distinfo,v 1.6.2.1 2026/11/11 10:42:53 maya Exp $
 
-BLAKE2s (crass-1.0.7.gem) = 8b36526797e5c0bf7aa3e007d80b425b18f067565b24821a1f2a3cf3b554555b
-SHA512 (crass-1.0.7.gem) = 4c3ee2ea174215154ff8f123ed72d9d19827f0388ea796929030a1e7059d052a9280b84a8d9eca4cecbd08b086562bedd702c7552b77faca2470ef0f886aac29
-Size (crass-1.0.7.gem) = 20992 bytes
+BLAKE2s (crass-1.0.8.gem) = 5dbff7d90736f5ebb46fdbb1f636c6bacc5267ec334c906900aa6a517783c529
+SHA512 (crass-1.0.8.gem) = 61b0a21da1d4621cea6388838be1491273ac8b0d76823a5b34b78f10814f11c009d8a1d545d4dae5905cad2ac2c23197abeda3df0b3423dc440ed0798917d33e
+Size (crass-1.0.8.gem) = 21504 bytes