CVS commit: [pkgsrc-2021Q2] pkgsrc/lang

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Mon Jul 12 12:46:55 UTC 2021

Modified Files:
        pkgsrc/lang/ruby [pkgsrc-2021Q2]: rubyversion.mk
        pkgsrc/lang/ruby27-base [pkgsrc-2021Q2]: distinfo

Log Message:
Pullup ticket #6484 - requested by taca
lang/ruby27-base: security fix

Revisions pulled up:
- lang/ruby/rubyversion.mk                                      1.233
- lang/ruby27-base/distinfo                                     1.5

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Wed Jul  7 15:23:08 UTC 2021

   Modified Files:
        pkgsrc/lang/ruby: rubyversion.mk
        pkgsrc/lang/ruby27-base: distinfo

   Log Message:
   lang/ruby27-base: update to 2.7.4

   Ruby 2.7.4 has been released.

   This release includes security fixes.  Please check the topics below
   for details.

   * CVE-2021-31810: Trusting FTP PASV responses vulnerability in Net::FTP
   * CVE-2021-32066: A StartTLS stripping vulnerability in Net::IMAP
   * CVE-2021-31799: A command injection vulnerability in RDoc

   See the commit logs for details:
   <https://github.com/ruby/ruby/compare/v2_7_3...v2_7_4>.


To generate a diff of this commit:
cvs rdiff -u -r1.231.2.1 -r1.231.2.2 pkgsrc/lang/ruby/rubyversion.mk
cvs rdiff -u -r1.4 -r1.4.2.1 pkgsrc/lang/ruby27-base/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/ruby/rubyversion.mk
diff -u pkgsrc/lang/ruby/rubyversion.mk:1.231.2.1 pkgsrc/lang/ruby/rubyversion.mk:1.231.2.2
--- pkgsrc/lang/ruby/rubyversion.mk:1.231.2.1   Mon Jul 12 12:40:18 2021
+++ pkgsrc/lang/ruby/rubyversion.mk     Mon Jul 12 12:46:55 2021
@@ -1,4 +1,4 @@
-# $NetBSD: rubyversion.mk,v 1.231.2.1 2021/07/12 12:40:18 bsiegert Exp $
+# $NetBSD: rubyversion.mk,v 1.231.2.2 2021/07/12 12:46:55 bsiegert Exp $
 #
 
 # This file determines which Ruby version is used as a dependency for
@@ -214,7 +214,7 @@ RUBY_VERSION_REQD?= ${PKGNAME_REQD:C/rub
 
 # current supported Ruby's version
 RUBY26_VERSION=                2.6.8
-RUBY27_VERSION=                2.7.3
+RUBY27_VERSION=                2.7.4
 RUBY30_VERSION=                3.0.1
 
 # current API compatible version; used for version of shared library
@@ -323,7 +323,7 @@ RUBY_SUFFIX=        ${_RUBY_VER_MAJOR}${_RUBY_V
 RUBY_VERSION=          ${RUBY27_VERSION}
 RUBY_ABI_VERSION=      ${RUBY_VERSION}
 
-RUBY_RDOC_VERSION=     6.2.1
+RUBY_RDOC_VERSION=     6.2.1.1
 
 RUBY_DID_YOU_MEAN_VERSION=     1.4.0
 RUBY_IRB_VERSION=              1.2.6

Index: pkgsrc/lang/ruby27-base/distinfo
diff -u pkgsrc/lang/ruby27-base/distinfo:1.4 pkgsrc/lang/ruby27-base/distinfo:1.4.2.1
--- pkgsrc/lang/ruby27-base/distinfo:1.4        Sun Apr 11 12:32:03 2021
+++ pkgsrc/lang/ruby27-base/distinfo    Mon Jul 12 12:46:55 2021
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.4 2021/04/11 12:32:03 taca Exp $
+$NetBSD: distinfo,v 1.4.2.1 2021/07/12 12:46:55 bsiegert Exp $
 
-SHA1 (ruby-2.7.3.tar.xz) = ce3d5203d5ab734df01e602c05f68f25249dc3e0
-RMD160 (ruby-2.7.3.tar.xz) = f02628d9137618e6d0833b450cd8e78a06579c31
-SHA512 (ruby-2.7.3.tar.xz) = b755d418b3bab2f9f6a8893afd13869269f17065643dde78b9e85ae3538a6d0617893db6e9c3908e00a40c7577a5c912a7c822d8f245cdcfb857be76dfb66c1e
-Size (ruby-2.7.3.tar.xz) = 12073568 bytes
+SHA1 (ruby-2.7.4.tar.xz) = 6e044d835f9f432cfa9441241c1ef66e3d607cbf
+RMD160 (ruby-2.7.4.tar.xz) = 6df300c44653c3c2ba0bff4f84da71cd4bc084a1
+SHA512 (ruby-2.7.4.tar.xz) = 2cbb70ecfdd69120e789023ddb2b25cab0d03bc33fdc367a8f74ca8a3ee785c18c8ded9de3ecee627c7e275ffb85147e6abf921b6a61e31851b37c7fedf45bf9
+Size (ruby-2.7.4.tar.xz) = 12067588 bytes
 SHA1 (patch-configure) = 5ee800f6824b18efd06e56a659235ea784819f2e
 SHA1 (patch-ext_dbm_extconf.rb) = c998f8735db54b1ae2bc8b6caa359ce88bc7a45b
 SHA1 (patch-lib_mkmf.rb) = 4a3cd18548dbdf43a13695d4e76f817c0347e335