summaryrefslogtreecommitdiff
path: root/devel
diff options
context:
space:
mode:
authortaca <taca@pkgsrc.org>2022-06-22 15:39:58 +0000
committertaca <taca@pkgsrc.org>2022-06-22 15:39:58 +0000
commitd909c4f450671c63ed8bbad15735f669fe489192 (patch)
tree444b56e4862f1501fd3b07ed10fffefa291ccb3b /devel
parent7c263d570a5cc0e68594635e508c8ede818b332c (diff)
downloadpkgsrc-d909c4f450671c63ed8bbad15735f669fe489192.tar.gz
devel/ruby-redmin42: update to 4.2.7
From release announce on 2022-06-21: Redmine 4.2.7 and 5.0.2 have been released and are available for download, you can review the changes in the Changelog. These maintenance releases fixes some important issues and multiple security fixes that were found in the latest Redmine 4.2.* and 5.0.* versions. Security: 1. Updates commonmark gem version to 0.23.4 when Ruby >= 2.6 is used in order to fix a remote code execution vulnerability. Because the fixed version of the gem doesn't support Ruby 2.5, those instances that are using Redmine 5.0.*, Commonmark and Ruby 2.5, it is highly recommended to update Ruby version to at least 2.6 because it's the only way to get the update and the fix. Also, the next major Redmine version (5.1.0) already dropped support for Ruby 2.5 (#37159). 2. Updates jQuery UI to 1.31.1 to fix 3 medium severity XSS vulnerabilities 3. Fixes unauthorised Information Leak in QueryAssociationColumn and QueryAssociationCustomFieldColumn when the user has no permission to view on the associated object Many thanks to Liane Hampe and Felix Schäfer for reporting these security issues and to Holger Just and Felix Schäfer for their work on fixing all these issues.
Diffstat (limited to 'devel')
-rw-r--r--devel/ruby-redmine42/Makefile4
-rw-r--r--devel/ruby-redmine42/PLIST6
-rw-r--r--devel/ruby-redmine42/distinfo8
3 files changed, 9 insertions, 9 deletions
diff --git a/devel/ruby-redmine42/Makefile b/devel/ruby-redmine42/Makefile
index 3199c74390b..9d38cc2ea0c 100644
--- a/devel/ruby-redmine42/Makefile
+++ b/devel/ruby-redmine42/Makefile
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.10 2022/06/15 14:22:55 taca Exp $
+# $NetBSD: Makefile,v 1.11 2022/06/22 15:39:58 taca Exp $
DISTNAME= redmine-${RM_VERSION}
PKGNAME= ${RUBY_PKGPREFIX}-${DISTNAME:S/redmine/redmine${RM_VER}/}
@@ -12,7 +12,7 @@ LICENSE= gnu-gpl-v2 # and so on.
USE_TOOLS+= pax
-RM_VERSION= 4.2.6
+RM_VERSION= 4.2.7
NO_BUILD= yes
diff --git a/devel/ruby-redmine42/PLIST b/devel/ruby-redmine42/PLIST
index daaba77628e..b0a23f6e6ce 100644
--- a/devel/ruby-redmine42/PLIST
+++ b/devel/ruby-redmine42/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.2 2022/04/03 05:36:02 taca Exp $
+@comment $NetBSD: PLIST,v 1.3 2022/06/22 15:39:58 taca Exp $
bin/redmine42_generate_secret_token${RUBY_SUFFIX}.sh
bin/redmine42_load_default_data${RUBY_SUFFIX}.sh
bin/redmine42_migrate_db${RUBY_SUFFIX}.sh
@@ -1613,7 +1613,7 @@ share/${RUBY_NAME}-redmine42/public/javascripts/i18n/datepicker-uk.js
share/${RUBY_NAME}-redmine42/public/javascripts/i18n/datepicker-vi.js
share/${RUBY_NAME}-redmine42/public/javascripts/i18n/datepicker-zh-CN.js
share/${RUBY_NAME}-redmine42/public/javascripts/i18n/datepicker-zh-TW.js
-share/${RUBY_NAME}-redmine42/public/javascripts/jquery-3.5.1-ui-1.12.1-ujs-5.2.4.5.js
+share/${RUBY_NAME}-redmine42/public/javascripts/jquery-3.6.0-ui-1.13.1-ujs-5.2.4.5.js
share/${RUBY_NAME}-redmine42/public/javascripts/jquery-migrate-3.3.2.min.js
share/${RUBY_NAME}-redmine42/public/javascripts/jstoolbar/jstoolbar.js
share/${RUBY_NAME}-redmine42/public/javascripts/jstoolbar/lang/jstoolbar-ar.js
@@ -1685,7 +1685,7 @@ share/${RUBY_NAME}-redmine42/public/stylesheets/jquery/images/ui-icons_777620_25
share/${RUBY_NAME}-redmine42/public/stylesheets/jquery/images/ui-icons_777777_256x240.png
share/${RUBY_NAME}-redmine42/public/stylesheets/jquery/images/ui-icons_cc0000_256x240.png
share/${RUBY_NAME}-redmine42/public/stylesheets/jquery/images/ui-icons_ffffff_256x240.png
-share/${RUBY_NAME}-redmine42/public/stylesheets/jquery/jquery-ui-1.12.1.css
+share/${RUBY_NAME}-redmine42/public/stylesheets/jquery/jquery-ui-1.13.1.css
share/${RUBY_NAME}-redmine42/public/stylesheets/jstoolbar.css
share/${RUBY_NAME}-redmine42/public/stylesheets/responsive.css
share/${RUBY_NAME}-redmine42/public/stylesheets/rtl.css
diff --git a/devel/ruby-redmine42/distinfo b/devel/ruby-redmine42/distinfo
index c5feec3f450..90bed3696a6 100644
--- a/devel/ruby-redmine42/distinfo
+++ b/devel/ruby-redmine42/distinfo
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.9 2022/06/15 14:22:55 taca Exp $
+$NetBSD: distinfo,v 1.10 2022/06/22 15:39:58 taca Exp $
-BLAKE2s (redmine-4.2.6.tar.gz) = 3e87ec7b1a4568d0d46cc8868d3ecd8481687411fce813eb50e50f5e0a7058de
-SHA512 (redmine-4.2.6.tar.gz) = 4071783917627927c0239cd3fefbc04a48706c28cd63b7fb09b5d234698b5847cc66f27dd717ee8d144385174471361b73b781799f02b73a49e141a6cbdd4077
-Size (redmine-4.2.6.tar.gz) = 3041632 bytes
+BLAKE2s (redmine-4.2.7.tar.gz) = 3e692c8190c896d0f40deb94a709494448622d68a03531323effdc015af0d8ad
+SHA512 (redmine-4.2.7.tar.gz) = 6654aec3981de8b26de416d253c22c91d881dd7df54192ce41e6e99213c6f4b0947ce213fe484c18117f8701d0528ebb23fe3acf335f84638eeddd972b601be9
+Size (redmine-4.2.7.tar.gz) = 3042676 bytes
SHA1 (patch-Gemfile) = 45289d38e0209c7393c199e5e915afca8f25fb7b
SHA1 (patch-lib_tasks_initializers.rake) = 73c4594c94abd28e628bbd172565b161f0e54fff