Path to this page:
Subject: CVS commit: [pkgsrc-2021Q3] pkgsrc/lang
From: Thomas Merkel
Date: 2021-11-27 23:02:59
Message id: 20211127220259.62BEBFAEC@cvs.NetBSD.org
Log Message:
Pullup ticket #6546 - requested by taca
lang/ruby27-base: security fix
Revisions pulled up:
- lang/ruby/rubyversion.mk 1.239
- lang/ruby27-base/PLIST 1.5
- lang/ruby27-base/distinfo 1.9
---
Module Name: pkgsrc
Committed By: taca
Date: Thu Nov 25 16:01:18 UTC 2021
Modified Files:
pkgsrc/lang/ruby: rubyversion.mk
pkgsrc/lang/ruby27-base: PLIST distinfo
Log Message:
lang/ruby27-base: update to 2.7.5
Ruby 2.7.5 Released
Posted by usa on 24 Nov 2021
Ruby 2.7.5 has been released.
This release includes security fixes. Please check the topics below for
details.
* CVE-2021-41817: Regular Expression Denial of Service Vulnerability of Date
Parsing Methods
* CVE-2021-41816: Buffer Overrun in CGI.escape_html
* CVE-2021-41819: Cookie Prefix Spoofing in CGI::Cookie.parse
See the commit logs for details.
Files: