CVS commit: pkgsrc/www/ruby-loofah

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Wed Mar 21 12:09:39 UTC 2018

Modified Files:
        pkgsrc/www/ruby-loofah: Makefile PLIST distinfo

Log Message:
www/ruby-loofah: update to 2.2.1

## 2.2.1 / 2018-03-19

Addresses CVE-2018-8048. Loofah allowed non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments.

This CVE's public notice is at https://github.com/flavorjones/loofah/issues/144


To generate a diff of this commit:
cvs rdiff -u -r1.2 -r1.3 pkgsrc/www/ruby-loofah/Makefile \
    pkgsrc/www/ruby-loofah/PLIST pkgsrc/www/ruby-loofah/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/ruby-loofah/Makefile
diff -u pkgsrc/www/ruby-loofah/Makefile:1.2 pkgsrc/www/ruby-loofah/Makefile:1.3
--- pkgsrc/www/ruby-loofah/Makefile:1.2 Sat Mar 17 16:21:48 2018
+++ pkgsrc/www/ruby-loofah/Makefile     Wed Mar 21 12:09:39 2018
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.2 2018/03/17 16:21:48 taca Exp $
+# $NetBSD: Makefile,v 1.3 2018/03/21 12:09:39 taca Exp $
 
-DISTNAME=      loofah-2.2.0
+DISTNAME=      loofah-2.2.1
 CATEGORIES=    www
 
 MAINTAINER=    minskim%NetBSD.org@localhost
Index: pkgsrc/www/ruby-loofah/PLIST
diff -u pkgsrc/www/ruby-loofah/PLIST:1.2 pkgsrc/www/ruby-loofah/PLIST:1.3
--- pkgsrc/www/ruby-loofah/PLIST:1.2    Sat Mar 17 16:21:48 2018
+++ pkgsrc/www/ruby-loofah/PLIST        Wed Mar 21 12:09:39 2018
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.2 2018/03/17 16:21:48 taca Exp $
+@comment $NetBSD: PLIST,v 1.3 2018/03/21 12:09:39 taca Exp $
 ${GEM_HOME}/cache/${GEM_NAME}.gem
 ${GEM_LIBDIR}/.gemtest
 ${GEM_LIBDIR}/CHANGELOG.md
@@ -7,6 +7,7 @@ ${GEM_LIBDIR}/MIT-LICENSE.txt
 ${GEM_LIBDIR}/Manifest.txt
 ${GEM_LIBDIR}/README.md
 ${GEM_LIBDIR}/Rakefile
+${GEM_LIBDIR}/SECURITY.md
 ${GEM_LIBDIR}/benchmark/benchmark.rb
 ${GEM_LIBDIR}/benchmark/fragment.html
 ${GEM_LIBDIR}/benchmark/helper.rb
@@ -16,6 +17,7 @@ ${GEM_LIBDIR}/lib/loofah/elements.rb
 ${GEM_LIBDIR}/lib/loofah/helpers.rb
 ${GEM_LIBDIR}/lib/loofah/html/document.rb
 ${GEM_LIBDIR}/lib/loofah/html/document_fragment.rb
+${GEM_LIBDIR}/lib/loofah/html5/libxml2_workarounds.rb
 ${GEM_LIBDIR}/lib/loofah/html5/scrub.rb
 ${GEM_LIBDIR}/lib/loofah/html5/whitelist.rb
 ${GEM_LIBDIR}/lib/loofah/instance_methods.rb
Index: pkgsrc/www/ruby-loofah/distinfo
diff -u pkgsrc/www/ruby-loofah/distinfo:1.2 pkgsrc/www/ruby-loofah/distinfo:1.3
--- pkgsrc/www/ruby-loofah/distinfo:1.2 Sat Mar 17 16:21:48 2018
+++ pkgsrc/www/ruby-loofah/distinfo     Wed Mar 21 12:09:39 2018
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.2 2018/03/17 16:21:48 taca Exp $
+$NetBSD: distinfo,v 1.3 2018/03/21 12:09:39 taca Exp $
 
-SHA1 (loofah-2.2.0.gem) = f88958f42507da6fa611b66677e817c78ee6d987
-RMD160 (loofah-2.2.0.gem) = 4ae199c042e7cb6c18e8c4c219e0e36dd052cc6f
-SHA512 (loofah-2.2.0.gem) = cfee8bb8c138fb76b8fbbf76c3962729711bd1d69bac6eb3fb1b25e0677f9da83b906b4b8f031a92d7780ce43d55bcdec4584dd9a12a9e4d7efc07db0484362e
-Size (loofah-2.2.0.gem) = 62464 bytes
+SHA1 (loofah-2.2.1.gem) = 124094ccdb70f8ed7dbc899c828e5d902f3155c8
+RMD160 (loofah-2.2.1.gem) = cfb7ab71026d8952165ff316383653d8899f79af
+SHA512 (loofah-2.2.1.gem) = df971a1bee08f0ee0913af2b4b7baefa6d1ad04af82de796f6f0d505fab7749d52ce79db0118343d336bdae6fcfd4190fecb315019b2c821d81ac1c08d5b8e2a
+Size (loofah-2.2.1.gem) = 65024 bytes