Path to this page:
Next | Query returned 1 messages, browsing 1 to 10 | previous
CVS Commit History:
2022-08-27 18:23:07 by S.P.Zeidler | Files touched by this commit (3) | ![Package updated](https://pkgsrc.se/images/update.gif) |
Log message:
Pullup ticket #6661 - requested by taca
time/ruby-tzinfo1: security update
Revisions pulled up:
- time/ruby-tzinfo1/Makefile 1.6
- time/ruby-tzinfo1/PLIST 1.3
- time/ruby-tzinfo1/distinfo 1.8
-------------------------------------------------------------------
Module Name: pkgsrc
Committed By: taca
Date: Sat Jul 30 14:20:42 UTC 2022
Modified Files:
pkgsrc/time/ruby-tzinfo1: Makefile PLIST distinfo
Log message:
time/ruby-tzinfo1: update to 1.2.10
1.2.10 (2022-07-19)
* Fixed a relative path traversal bug that could cause arbitrary files to be
loaded with require when used with RubyDataSource. Please refer to
GHSA-5cm2-9h8c-rvfx for details. CVE-2022-31163.
* Ignore the SECURITY file from Arch Linux's tzdata package. #134.
To generate a diff of this commit:
cvs rdiff -u -r1.5 -r1.6 pkgsrc/time/ruby-tzinfo1/Makefile
cvs rdiff -u -r1.2 -r1.3 pkgsrc/time/ruby-tzinfo1/PLIST
cvs rdiff -u -r1.7 -r1.8 pkgsrc/time/ruby-tzinfo1/distinfo
|
Next | Query returned 1 messages, browsing 1 to 10 | previous