Subject: CVS commit: [pkgsrc-2021Q3] pkgsrc/lang
From: Thomas Merkel
Date: 2021-11-27 23:02:59
Message id: 20211127220259.62BEBFAEC@cvs.NetBSD.org

Log Message:
Pullup ticket #6546 - requested by taca
lang/ruby27-base: security fix

Revisions pulled up:
- lang/ruby/rubyversion.mk                                      1.239
- lang/ruby27-base/PLIST                                        1.5
- lang/ruby27-base/distinfo                                     1.9

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Nov 25 16:01:18 UTC 2021

   Modified Files:
   	pkgsrc/lang/ruby: rubyversion.mk
   	pkgsrc/lang/ruby27-base: PLIST distinfo

   Log Message:
   lang/ruby27-base: update to 2.7.5

   Ruby 2.7.5 Released
   Posted by usa on 24 Nov 2021

   Ruby 2.7.5 has been released.

   This release includes security fixes.  Please check the topics below for
   details.

   * CVE-2021-41817: Regular Expression Denial of Service Vulnerability of Date
     Parsing Methods

   * CVE-2021-41816: Buffer Overrun in CGI.escape_html

   * CVE-2021-41819: Cookie Prefix Spoofing in CGI::Cookie.parse

   See the commit logs for details.

Files:
RevisionActionfile
1.237.2.2modifypkgsrc/lang/ruby/rubyversion.mk
1.4.4.1modifypkgsrc/lang/ruby27-base/PLIST
1.5.2.1modifypkgsrc/lang/ruby27-base/distinfo