pkgsrc/devel/ruby-curses, branch pkgsrc_2008Q2

pullup ticket #2481 - requested by taca

2008-08-12T11:22:11Z

ruby-curses, ruby, ruby18-base, ruby-tk: security fix revisions pulled up pkgsrc/lang/ruby/rubyversion.mk 1.44 pkgsrc/lang/ruby18-base/distinfo 1.17 pkgsrc/devel/ruby-curses/distinfo 1.33 pkgsrc/x11/ruby-tk/distinfo 1.20 Module Name: pkgsrc Committed By: taca Date: Mon Aug 11 06:58:33 UTC 2008 Modified Files: pkgsrc/lang/ruby: rubyversion.mk pkgsrc/lang/ruby18-base: distinfo Log Message: Update ruby18-base to 1.8.7.72 (Ruby 1.8.7-p72). These packages are implicitly updated with distfile update only. databases/ruby-gdbm devel/ruby-readline lang/ruby lang/ruby18 Here's quote from release announce: Sorry for a fuss, but it turned out that taintness check of dl in last releases I made was incomplete. Here are fixes for that. And relevant changes: Mon Aug 11 09:37:17 2008 Yukihiro Matsumoto * ext/dl/dl.c (rb_str_to_ptr): should propagate taint to dlptr. * ext/dl/dl.c (rb_ary_to_ptr): ditto. * ext/dl/sym.c (rb_dlsym_call): should check taint of DLPtrData as well. ------------------------------------------------------------------------ Module Name: pkgsrc Committed By: taca Date: Mon Aug 11 06:59:40 UTC 2008 Modified Files: pkgsrc/devel/ruby-curses: distinfo Log Message: Update ruby-curses package to 1.8.7.72. It is distfile change only. ------------------------------------------------------------------------ Module Name: pkgsrc Committed By: taca Date: Mon Aug 11 06:59:55 UTC 2008 Modified Files: pkgsrc/x11/ruby-tk: distinfo Log Message: Update ruby-curses package to 1.8.7.72. It is distfile change only.

Pullup ticket 2473 - requested by taca

2008-08-08T14:37:50Z

security update for ruby - pkgsrc/devel/ruby-curses/distinfo 1.16 - pkgsrc/lang/ruby/rubyversion.mk 1.43 - pkgsrc/lang/ruby18-base/Makefile 1.46 - pkgsrc/lang/ruby18-base/distinfo 1.32 - pkgsrc/lang/ruby18-base/patches/patch-ad removed - pkgsrc/x11/ruby-tk/distinfo 1.19 Module Name: pkgsrc Committed By: taca Date: Fri Aug 8 12:38:59 UTC 2008 Modified Files: pkgsrc/lang/ruby: rubyversion.mk Log Message: Start update of Ruby 1.8.7 patchlevel 71. --- Module Name: pkgsrc Committed By: taca Date: Fri Aug 8 12:42:44 UTC 2008 Modified Files: pkgsrc/lang/ruby18-base: Makefile distinfo Removed Files: pkgsrc/lang/ruby18-base/patches: patch-ad Log Message: Update ruby18-base to 1.8.7.71. pkgsrc change: Apply fix for sunpro compilre, provided by PR pkg/37771 from Naoto Morishima. This release includes fix for multiple vulnerabilities. http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/ * Several vulnerabilities in safe level * DoS vulnerability in WEBrick * Lack of taintness check in dl * DNS spoofing vulnerability in resolv.rb Full changes are too many, please refer ChangeLog file. --- Module Name: pkgsrc Committed By: taca Date: Fri Aug 8 12:43:51 UTC 2008 Modified Files: pkgsrc/devel/ruby-curses: distinfo Log Message: Update ruby-curses package to 1.8.7.71. This is version update only, no functional change in this ruby extention. --- Module Name: pkgsrc Committed By: taca Date: Fri Aug 8 12:44:51 UTC 2008 Modified Files: pkgsrc/x11/ruby-tk: distinfo Log Message: Update ruby-tk package to 1.8.7.71. This is version update only, no functional change in this ruby extention.

Update distinfo for Ruby 1.8.7 patchlevel 22.

2008-06-20T15:40:25Z

Update ruby18-curses package to 1.8.7.

2008-06-19T14:36:53Z

Since chanes are too much to write here, please refer http://svn.ruby-lang.org/repos/ruby/tags/v1_8_7/NEWS http://svn.ruby-lang.org/repos/ruby/tags/v1_8_7/ChangeLog http://svn.ruby-lang.org/repos/ruby/tags/v1_8_7_17/NEWS http://svn.ruby-lang.org/repos/ruby/tags/v1_8_7_17/ChangeLog

+ Support user-destdir installation.

2008-03-13T21:55:48Z

+ Include termcap.buildlink3.mk because curses.so is linked against -ltermcap, so we need it to be transformed into the right library depending on the platform and PREFER_* settings. Bump the PKGREVISION to 1. + Because we are asking for ncurses (by include ncurses/buildlink3.mk), check for and -lncurses instead of and -lcurses. The curses.c file gets it wrong otherwise.

Update ruby pakcages to 1.8.6.114 (1.8.6-p114).

2008-03-09T13:31:18Z

It main chagnes are security fix of WEBrick library. Mon Mar 3 23:34:13 2008 GOTOU Yuuzou * lib/webrick/httpservlet/filehandler.rb: should normalize path separators in path_info to prevent directory traversal attacks on DOSISH platforms. reported by Digital Security Research Group [DSECRG-08-026]. * lib/webrick/httpservlet/filehandler.rb: pathnames which have not to be published should be checked case-insensitively. Mon Dec 3 08:13:52 2007 Kouhei Sutou * test/rss/test_taxonomy.rb, test/rss/test_parser_1.0.rb, test/rss/test_image.rb, test/rss/rss-testcase.rb: ensured declaring XML namespaces.

Update Ruby packages to 1.8.6-p111.

2007-10-06T06:13:35Z

No change; DISTFILES update only.

Update Ruby to 1.8.6-p110.

2007-09-24T22:00:20Z

Approved by wiz@. Nothing changes with these package except distfile.

Update to 1.8.6 patchlevel 36.

2007-09-09T14:19:01Z

Changes are too many, please see ChangeLog: http://svn.ruby-lang.org/repos/ruby/tags/v1_8_6_36/ChangeLog

Updating Ruby to 1.8.6; ruby18-curses

2007-03-15T16:42:32Z

- discontinue use of RUBY_PATCH_DATE. - Introduce RUBY_PATCH_LEVEL. pkgsrc's ruby tracks Ruby's patch release and avoid to maintain its own patch files (with RUBY_PATCH_DATE). Changes are too much, please see ChangeLog file.