Subject: CVS commit: pkgsrc/lang
From: Takahiro Kambe
Date: 2018-03-29 05:04:47
Message id: 20180329030448.0DC76FB40@cvs.NetBSD.org

Log Message:
lang/ruby24-base: update to 2.4.4, security release

Ruby 2.4.4 Released			Posted by nagachika on 28 Mar 2018

Ruby 2.4.4 has been released.

This release includes some bug fixes and some security fixes.

* CVE-2017-17742: HTTP response splitting in WEBrick
* CVE-2018-6914: Unintentional file and directory creation with directory
  traversal in tempfile and tmpdir
* CVE-2018-8777: DoS by large request in WEBrick
* CVE-2018-8778: Buffer under-read in String#unpack
* CVE-2018-8779: Unintentional socket creation by poisoned NUL byte in
  UNIXServer and UNIXSocket
* CVE-2018-8780: Unintentional directory traversal by poisoned NUL byte in Dir
* Multiple vulnerabilities in RubyGems

There are also some bug fixes. See commit logs for more details.

Files:
RevisionActionfile
1.192modifypkgsrc/lang/ruby/rubyversion.mk
1.8modifypkgsrc/lang/ruby24-base/Makefile
1.9modifypkgsrc/lang/ruby24-base/distinfo
1.1removepkgsrc/lang/ruby24-base/patches/patch-man_erb.1
1.1removepkgsrc/lang/ruby24-base/patches/patch-man_irb.1
1.1removepkgsrc/lang/ruby24-base/patches/patch-man_ri.1
1.1removepkgsrc/lang/ruby24-base/patches/patch-man_ruby.1