Path to this page:
Subject: CVS commit: [pkgsrc-2022Q2] pkgsrc/time/ruby-tzinfo1
From: S.P.Zeidler
Date: 2022-08-27 18:23:07
Message id: 20220827162307.EAB39F9F3@cvs.NetBSD.org
Log Message:
Pullup ticket #6661 - requested by taca
time/ruby-tzinfo1: security update
Revisions pulled up:
- time/ruby-tzinfo1/Makefile 1.6
- time/ruby-tzinfo1/PLIST 1.3
- time/ruby-tzinfo1/distinfo 1.8
-------------------------------------------------------------------
Module Name: pkgsrc
Committed By: taca
Date: Sat Jul 30 14:20:42 UTC 2022
Modified Files:
pkgsrc/time/ruby-tzinfo1: Makefile PLIST distinfo
Log Message:
time/ruby-tzinfo1: update to 1.2.10
1.2.10 (2022-07-19)
* Fixed a relative path traversal bug that could cause arbitrary files to be
loaded with require when used with RubyDataSource. Please refer to
GHSA-5cm2-9h8c-rvfx for details. CVE-2022-31163.
* Ignore the SECURITY file from Arch Linux's tzdata package. #134.
To generate a diff of this commit:
cvs rdiff -u -r1.5 -r1.6 pkgsrc/time/ruby-tzinfo1/Makefile
cvs rdiff -u -r1.2 -r1.3 pkgsrc/time/ruby-tzinfo1/PLIST
cvs rdiff -u -r1.7 -r1.8 pkgsrc/time/ruby-tzinfo1/distinfo
Files: