diff options
| author | taca <taca> | 2011-09-04 17:05:13 +0000 |
|---|---|---|
| committer | taca <taca> | 2011-09-04 17:05:13 +0000 |
| commit | 245d1d1bd87de6e6fc1cf41974646b355b6d64c4 (patch) | |
| tree | 73403a7b9db23546256de27a2a974acdbb295f1b | |
| parent | 77de0033b520957ad559a1dcf6e10476bd8eb410 (diff) | |
| download | pkgsrc-245d1d1bd87de6e6fc1cf41974646b355b6d64c4.tar.gz | |
Update rubygems package to 1.8.10.
=== 1.8.10 / 2011-08-25
RubyGems 1.8.10 contains a security fix that prevents malicious gems from
executing code when their specification is loaded. See
https://github.com/rubygems/rubygems/pull/165 for details.
* 5 bug fixes:
* RubyGems escapes strings in ruby-format specs using #dump instead of #to_s
and %q to prevent code injection. Issue #165 by Postmodern
* RubyGems attempt to activate the psych gem now to obtain bugfixes from
psych.
* Gem.dir has been restored to the front of Gem.path. Fixes remaining
problem with Issue #115
* Fixed Syck DefaultKey infecting ruby-format specifications.
* `gem uninstall a b` no longer stops if gem "a" is not installed.
| -rw-r--r-- | misc/rubygems/Makefile | 6 | ||||
| -rw-r--r-- | misc/rubygems/distinfo | 10 | ||||
| -rw-r--r-- | misc/rubygems/patches/patch-aa | 14 |
3 files changed, 20 insertions, 10 deletions
diff --git a/misc/rubygems/Makefile b/misc/rubygems/Makefile index 787997dff0b..ad6195a4d64 100644 --- a/misc/rubygems/Makefile +++ b/misc/rubygems/Makefile @@ -1,9 +1,9 @@ -# $NetBSD: Makefile,v 1.40 2011/08/25 15:15:44 taca Exp $ +# $NetBSD: Makefile,v 1.41 2011/09/04 17:05:13 taca Exp $ -DISTNAME= rubygems-1.8.9 +DISTNAME= rubygems-1.8.10 CATEGORIES= misc ruby MASTER_SITES= http://production.cf.rubygems.org/rubygems/ \ - http://rubyforge.org/frs/download.php/75296/ + http://rubyforge.org/frs/download.php/75309/ EXTRACT_SUFX= .tgz MAINTAINER= taca@NetBSD.org diff --git a/misc/rubygems/distinfo b/misc/rubygems/distinfo index 60b3d842a50..9626ffde4cb 100644 --- a/misc/rubygems/distinfo +++ b/misc/rubygems/distinfo @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.30 2011/08/25 15:15:44 taca Exp $ +$NetBSD: distinfo,v 1.31 2011/09/04 17:05:13 taca Exp $ -SHA1 (rubygems-1.8.9.tgz) = fa073919150d017ef887b064fcf589e2fc37ed42 -RMD160 (rubygems-1.8.9.tgz) = f3d186a96190740347abca43372874f8f2be6404 -Size (rubygems-1.8.9.tgz) = 248826 bytes -SHA1 (patch-aa) = abb8adc8f8edd0d4b5278f2a375e8b799559d5a4 +SHA1 (rubygems-1.8.10.tgz) = d2e8c5d9f7a69ef2c6a98097ff192f238b0ce11f +RMD160 (rubygems-1.8.10.tgz) = 2c7dc4bc5459a0b2cf771c9398f750cfe0dbcbf5 +Size (rubygems-1.8.10.tgz) = 249683 bytes +SHA1 (patch-aa) = cd7fde36ce3d67a5d96a3280d9f11b3c5b78a820 SHA1 (patch-ab) = 00c16e5c0a82a26062e6d9d9b7a2d275f8537ab4 SHA1 (patch-ac) = 7c3e254d120bcb9fb90895a7119eb18920508948 SHA1 (patch-ad) = 6df1c96bee978425fdc7189af4e8389963b34782 diff --git a/misc/rubygems/patches/patch-aa b/misc/rubygems/patches/patch-aa index 63602df5ea1..7fa4168db7b 100644 --- a/misc/rubygems/patches/patch-aa +++ b/misc/rubygems/patches/patch-aa @@ -1,9 +1,10 @@ -$NetBSD: patch-aa,v 1.10 2011/08/12 15:50:44 taca Exp $ +$NetBSD: patch-aa,v 1.11 2011/09/04 17:05:13 taca Exp $ * Relax to allow some attribute could be nil. * Complete "http://" to homepage attribute if it isn't begin with it. +* Accpet date with Time, but ignore time part. ---- lib/rubygems/specification.rb.orig 2011-07-25 23:44:31.000000000 +0000 +--- lib/rubygems/specification.rb.orig 2011-08-27 00:43:50.000000000 +0000 +++ lib/rubygems/specification.rb @@ -118,6 +118,12 @@ class Gem::Specification @@default_value[k].nil? @@ -18,6 +19,15 @@ $NetBSD: patch-aa,v 1.10 2011/08/12 15:50:44 taca Exp $ ###################################################################### # :section: Required gemspec attributes +@@ -984,7 +990,7 @@ class Gem::Specification + # way to do it. + @date = case date + when String then +- if /\A(\d{4})-(\d{2})-(\d{2})\Z/ =~ date then ++ if /\A(\d{4})-(\d{2})-(\d{2})/ =~ date then + Time.utc($1.to_i, $2.to_i, $3.to_i) + else + raise(Gem::InvalidSpecificationException, @@ -1950,7 +1956,24 @@ class Gem::Specification normalize |