Subject: CVS commit: [pkgsrc-2021Q3] pkgsrc/lang
From: Thomas Merkel
Date: 2021-11-27 23:11:20
Message id: 20211127221120.8D844FAEC@cvs.NetBSD.org

Log Message:
Pullup ticket #6547 - requested by taca
lang/ruby30-base: security fix

Revisions pulled up:
- lang/ruby/rubyversion.mk                                      1.240
- lang/ruby30-base/PLIST                                        1.4
- lang/ruby30-base/distinfo                                     1.7
- lang/ruby30-base/patches/patch-lib_rubygems_installer.rb      1.2

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Nov 25 16:35:52 UTC 2021

   Modified Files:
   	pkgsrc/lang/ruby: rubyversion.mk
   	pkgsrc/lang/ruby30-base: PLIST distinfo
   	pkgsrc/lang/ruby30-base/patches: patch-lib_rubygems_installer.rb

   Log Message:
   lang/ruby30-base: update to 3.0.3

   Ruby 3.0.3 Released
   Posted by nagachika on 24 Nov 2021

   Ruby 3.0.3 has been released.

   This release includes security fixes.  Please check the topics below for
   details.

   * CVE-2021-41817: Regular Expression Denial of Service Vulnerability of Date
     Parsing Methods

   * CVE-2021-41816: Buffer Overrun in CGI.escape_html

   * CVE-2021-41819: Cookie Prefix Spoofing in CGI::Cookie.parse

   See the commit logs for details.

Files:
RevisionActionfile
1.237.2.3modifypkgsrc/lang/ruby/rubyversion.mk
1.3.2.1modifypkgsrc/lang/ruby30-base/PLIST
1.3.2.1modifypkgsrc/lang/ruby30-base/distinfo
1.1.6.1modifypkgsrc/lang/ruby30-base/patches/patch-lib_rubygems_installer.rb