Subject: CVS commit: [pkgsrc-2021Q1] pkgsrc/lang
From: Benny Siegert
Date: 2021-04-15 09:10:45
Message id: 20210415071045.BDECEFA95@cvs.NetBSD.org

Log Message:
Pullup ticket #6443 - requested by taca
lang/ruby26-base: security fix, bugfix

Revisions pulled up:
- lang/ruby/rubyversion.mk                                      1.227-1.228
- lang/ruby26-base/ALTERNATIVES                                 1.2
- lang/ruby26-base/Makefile                                     1.13
- lang/ruby26-base/PLIST                                        1.5
- lang/ruby26-base/distinfo                                     1.10
- lang/ruby26-base/patches/patch-configure                      1.3
- lang/ruby26-base/patches/patch-lib_webrick_httprequest.rb     deleted

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Apr 11 12:16:20 UTC 2021

   Modified Files:
   	pkgsrc/lang/ruby: rubyversion.mk

   Log Message:
   lang/ruby/rubyversion.mk: pass RUBY_RAILS_ACCEPTED

   Pass RUBY_RAILS_ACCEPTED to MAKEFLAGS unless it isn't empty.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Apr 11 12:28:38 UTC 2021

   Modified Files:
   	pkgsrc/lang/ruby: rubyversion.mk
   	pkgsrc/lang/ruby26-base: Makefile PLIST distinfo
   	pkgsrc/lang/ruby26-base/patches: patch-configure
   Removed Files:
   	pkgsrc/lang/ruby26-base/patches: patch-lib_webrick_httprequest.rb

   Log Message:
   lang/ruby26-base: update to 2.6.7

   Ruby 2.6.7 Released (2021-04-05)

   This release includes security fixes.  Please check the topics below for
   details.

   * CVE-2020-25613: Potential HTTP Request Smuggling Vulnerability in
     WEBrick
   * CVE-2021-28965: XML round-trip vulnerability in REXML

   See the commit logs for details.

   By this release, we end the normal maintenance phase of Ruby 2.6, and Ruby
   2.6 enters the security maintenance phase.  This means that we will no
   longer backport any bug fixes to Ruby 2.6 except security fixes.  The term
   of the security maintenance phase is scheduled for a year.  Ruby 2.6 reaches
   EOL and its official support ends by the end of the security maintenance
   phase.  Therefore, we recommend that you start to plan upgrade to Ruby 2.7
   or 3.0.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Apr 11 13:00:25 UTC 2021

   Modified Files:
   	pkgsrc/lang/ruby26-base: ALTERNATIVES

   Log Message:
   lang/ruby26-base: fix ALTERNATIVES file

Files:
RevisionActionfile
1.225.2.2modifypkgsrc/lang/ruby/rubyversion.mk
1.1.18.1modifypkgsrc/lang/ruby26-base/ALTERNATIVES
1.12.2.1modifypkgsrc/lang/ruby26-base/Makefile
1.4.8.1modifypkgsrc/lang/ruby26-base/PLIST
1.9.4.1modifypkgsrc/lang/ruby26-base/distinfo
1.2.18.1modifypkgsrc/lang/ruby26-base/patches/patch-configure
1.1removepkgsrc/lang/ruby26-base/patches/patch-lib_webrick_httprequest.rb