Subject: CVS commit: [pkgsrc-2022Q2] pkgsrc/time/ruby-tzinfo1
From: S.P.Zeidler
Date: 2022-08-27 18:23:07
Message id: 20220827162307.EAB39F9F3@cvs.NetBSD.org

Log Message:
Pullup ticket #6661 - requested by taca
time/ruby-tzinfo1: security update

Revisions pulled up:
- time/ruby-tzinfo1/Makefile                                    1.6
- time/ruby-tzinfo1/PLIST                                       1.3
- time/ruby-tzinfo1/distinfo                                    1.8

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sat Jul 30 14:20:42 UTC 2022

   Modified Files:
   	pkgsrc/time/ruby-tzinfo1: Makefile PLIST distinfo

   Log Message:
   time/ruby-tzinfo1: update to 1.2.10

   1.2.10 (2022-07-19)

   * Fixed a relative path traversal bug that could cause arbitrary files to be
     loaded with require when used with RubyDataSource.  Please refer to
     GHSA-5cm2-9h8c-rvfx for details. CVE-2022-31163.

   * Ignore the SECURITY file from Arch Linux's tzdata package. #134.

   To generate a diff of this commit:
   cvs rdiff -u -r1.5 -r1.6 pkgsrc/time/ruby-tzinfo1/Makefile
   cvs rdiff -u -r1.2 -r1.3 pkgsrc/time/ruby-tzinfo1/PLIST
   cvs rdiff -u -r1.7 -r1.8 pkgsrc/time/ruby-tzinfo1/distinfo

Files:
RevisionActionfile
1.5.12.1modifypkgsrc/time/ruby-tzinfo1/Makefile
1.2.14.1modifypkgsrc/time/ruby-tzinfo1/PLIST
1.7.6.1modifypkgsrc/time/ruby-tzinfo1/distinfo