[pkgsrc/pkgsrc-2020Q1]: pkgsrc/www/ruby-puma Pullup ticket #6223 - requested ...

[bsiegert <bsiegert%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/b135e93e8379
branches:  pkgsrc-2020Q1
changeset: 433917:b135e93e8379
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Mon Jun 08 17:52:41 2020 +0000

description:
Pullup ticket #6223 - requested by taca
www/ruby-puma: security fix

Revisions pulled up:
- www/ruby-puma/Makefile                                        1.23
- www/ruby-puma/distinfo                                        1.18

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sun May 24 13:47:49 UTC 2020

   Modified Files:
        pkgsrc/www/ruby-puma: Makefile distinfo

   Log Message:
   www/ruby-puma: update to 4.3.5

   Update ruby-puma to 4.3.5.

   4.3.4/4.3.5 and 3.12.5/3.12.6 / 2020-05-22

   Each patchlevel release contains a separate security fix. We recommend
   simply upgrading to 4.3.5/3.12.6.

   * Security

     Fix: Fixed two separate HTTP smuggling vulnerabilities that used the
     Transfer-Encoding header. CVE-2020-11076 and CVE-2020-11077.

diffstat:

 www/ruby-puma/Makefile |   4 ++--
 www/ruby-puma/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (27 lines):

diff -r 779767ea9b5f -r b135e93e8379 www/ruby-puma/Makefile
--- a/www/ruby-puma/Makefile    Thu Jun 04 12:17:18 2020 +0000
+++ b/www/ruby-puma/Makefile    Mon Jun 08 17:52:41 2020 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.22 2020/03/01 02:52:25 taca Exp $
+# $NetBSD: Makefile,v 1.22.2.1 2020/06/08 17:52:41 bsiegert Exp $
 
-DISTNAME=      puma-4.3.3
+DISTNAME=      puma-4.3.5
 CATEGORIES=    www
 
 MAINTAINER=    taca%NetBSD.org@localhost
diff -r 779767ea9b5f -r b135e93e8379 www/ruby-puma/distinfo
--- a/www/ruby-puma/distinfo    Thu Jun 04 12:17:18 2020 +0000
+++ b/www/ruby-puma/distinfo    Mon Jun 08 17:52:41 2020 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.17 2020/03/01 02:52:25 taca Exp $
+$NetBSD: distinfo,v 1.17.2.1 2020/06/08 17:52:41 bsiegert Exp $
 
-SHA1 (puma-4.3.3.gem) = fe73c9cffc842eb7fe07ea1ec01dad9ddc40976f
-RMD160 (puma-4.3.3.gem) = 4777976662b29a3e9a34fb4fbca8d950d24a4a88
-SHA512 (puma-4.3.3.gem) = 12d6cfd483f6c10f61ab1480e15ad32bbb878f451a9cf1b5e07f54b41608ff265f5963c018c6b73b247dd58fda4c2f47bba1975e8e61df37cb788280fbb4ed0e
-Size (puma-4.3.3.gem) = 174592 bytes
+SHA1 (puma-4.3.5.gem) = d7652ab00d3791508b17f51a9f88a72b6584aeb8
+RMD160 (puma-4.3.5.gem) = 80c23f63ae471d6914178a520630c3fefe72624c
+SHA512 (puma-4.3.5.gem) = 7271d2c6d12094fdc9c17ae93f14f6c83e6e007f46359940e40e37b712b5e8deb9646640333a5e0cfe92ccc8d5fb85b490d4a5899489031ea3caccca55a3ae94
+Size (puma-4.3.5.gem) = 175104 bytes