Ruby security updates

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

Ruby security updates

Jeremy Evans-5
There were security patches released last week for all versions of Ruby
in the ports tree.  Today they released new versions of Ruby 2.5 and
2.6.  So we'll use the new versions of Ruby 2.5 and 2.6, and for Ruby
2.4, we'll use an upstream patch taken from the bugtracker.

Vulnerability Announcement:
https://www.ruby-lang.org/en/news/2019/03/05/multiple-vulnerabilities-in-rubygems/

Ruby 2.5.4 Release Announcement:
https://www.ruby-lang.org/en/news/2019/03/13/ruby-2-5-4-released/

Ruby 2.6.2 Release Announcement:
https://www.ruby-lang.org/en/news/2019/03/13/ruby-2-6-2-released/

The tests for Ruby currently hang due to an issue in LibreSSL (beck@ is
working on a fix for it).  Tests with my own apps and libraries are
fine.

Will be committing in a couple days unless I hear objections.

Thanks,
Jeremy

Index: 2.4/Makefile
===================================================================
RCS file: /cvs/ports/lang/ruby/2.4/Makefile,v
retrieving revision 1.14
diff -u -p -r1.14 Makefile
--- 2.4/Makefile 30 Nov 2018 15:19:07 -0000 1.14
+++ 2.4/Makefile 13 Mar 2019 19:06:00 -0000
@@ -5,7 +5,9 @@ SHARED_LIBS = ruby24 2.0
 NEXTVER = 2.5
 
 REVISION = 0
-REVISION-main = 1
+REVISION-main = 2
+REVISION-ri_docs = 1
+PATCHFILES = 7669/ruby-2.4.5-rubygems-v2.patch:0
 
 PSEUDO_FLAVORS= no_ri_docs bootstrap
 # Do not build the RI docs on slow arches
Index: 2.4/distinfo
===================================================================
RCS file: /cvs/ports/lang/ruby/2.4/distinfo,v
retrieving revision 1.8
diff -u -p -r1.8 distinfo
--- 2.4/distinfo 22 Oct 2018 14:45:52 -0000 1.8
+++ 2.4/distinfo 6 Mar 2019 05:18:49 -0000
@@ -1,2 +1,4 @@
+SHA256 (7669/ruby-2.4.5-rubygems-v2.patch) = FLWaNT38+GCMpDh8Iy7heTBncLyeXjQbsPdZGZAoWoY=
 SHA256 (ruby-2.4.5.tar.gz) = Zzd0Gub/phF0yKPc3YupK8OIJ4J6sdfqHseLw878UZg=
+SIZE (7669/ruby-2.4.5-rubygems-v2.patch) = 12769
 SIZE (ruby-2.4.5.tar.gz) = 14232887
Index: 2.4/pkg/PLIST-ri_docs
===================================================================
RCS file: /cvs/ports/lang/ruby/2.4/pkg/PLIST-ri_docs,v
retrieving revision 1.6
diff -u -p -r1.6 PLIST-ri_docs
--- 2.4/pkg/PLIST-ri_docs 22 Oct 2018 14:45:52 -0000 1.6
+++ 2.4/pkg/PLIST-ri_docs 13 Mar 2019 18:01:04 -0000
@@ -2710,7 +2710,7 @@ share/ri/${REV}/system/Gem/Installer/she
 share/ri/${REV}/system/Gem/Installer/spec-i.ri
 share/ri/${REV}/system/Gem/Installer/spec_file-i.ri
 share/ri/${REV}/system/Gem/Installer/unpack-i.ri
-share/ri/${REV}/system/Gem/Installer/verify_spec_name-i.ri
+share/ri/${REV}/system/Gem/Installer/verify_spec-i.ri
 share/ri/${REV}/system/Gem/Installer/windows_stub_script-i.ri
 share/ri/${REV}/system/Gem/Installer/wrappers-i.ri
 share/ri/${REV}/system/Gem/Installer/write_build_info_file-i.ri
Index: 2.5/Makefile
===================================================================
RCS file: /cvs/ports/lang/ruby/2.5/Makefile,v
retrieving revision 1.7
diff -u -p -r1.7 Makefile
--- 2.5/Makefile 30 Nov 2018 15:19:07 -0000 1.7
+++ 2.5/Makefile 13 Mar 2019 17:23:06 -0000
@@ -1,11 +1,8 @@
 # $OpenBSD: Makefile,v 1.7 2018/11/30 15:19:07 jeremy Exp $
 
-VERSION = 2.5.3
+VERSION = 2.5.4
 SHARED_LIBS = ruby25 0.0
 NEXTVER = 2.6
-
-REVISION = 0
-REVISION-main = 1
 
 PSEUDO_FLAVORS= no_ri_docs bootstrap
 # Do not build the RI docs on slow arches
Index: 2.5/distinfo
===================================================================
RCS file: /cvs/ports/lang/ruby/2.5/distinfo,v
retrieving revision 1.4
diff -u -p -r1.4 distinfo
--- 2.5/distinfo 22 Oct 2018 14:46:53 -0000 1.4
+++ 2.5/distinfo 13 Mar 2019 17:23:16 -0000
@@ -1,2 +1,2 @@
-SHA256 (ruby-2.5.3.tar.gz) = mCjQOFLDfCD6MzoCZPJJDwczhXZzTZEO4/1TjJUghGw=
-SIZE (ruby-2.5.3.tar.gz) = 15972577
+SHA256 (ruby-2.5.4.tar.gz) = DkBCvOdJNS388bnjATunwHi3KPUfitr2RwzjdnXjyx8=
+SIZE (ruby-2.5.4.tar.gz) = 15995815
Index: 2.5/pkg/PLIST-ri_docs
===================================================================
RCS file: /cvs/ports/lang/ruby/2.5/pkg/PLIST-ri_docs,v
retrieving revision 1.3
diff -u -p -r1.3 PLIST-ri_docs
--- 2.5/pkg/PLIST-ri_docs 22 Oct 2018 14:46:53 -0000 1.3
+++ 2.5/pkg/PLIST-ri_docs 13 Mar 2019 17:57:32 -0000
@@ -2196,7 +2196,6 @@ share/ri/${REV}/system/Gem/BundlerVersio
 share/ri/${REV}/system/Gem/BundlerVersionFinder/lockfile_contents-c.ri
 share/ri/${REV}/system/Gem/BundlerVersionFinder/lockfile_version-c.ri
 share/ri/${REV}/system/Gem/BundlerVersionFinder/missing_version_message-c.ri
-share/ri/${REV}/system/Gem/BundlerVersionFinder/without_filtering-c.ri
 share/ri/${REV}/system/Gem/Command/
 share/ri/${REV}/system/Gem/Command/add_common_option-c.ri
 share/ri/${REV}/system/Gem/Command/add_extra_args-i.ri
@@ -2751,7 +2750,7 @@ share/ri/${REV}/system/Gem/Installer/she
 share/ri/${REV}/system/Gem/Installer/spec-i.ri
 share/ri/${REV}/system/Gem/Installer/spec_file-i.ri
 share/ri/${REV}/system/Gem/Installer/unpack-i.ri
-share/ri/${REV}/system/Gem/Installer/verify_spec_name-i.ri
+share/ri/${REV}/system/Gem/Installer/verify_spec-i.ri
 share/ri/${REV}/system/Gem/Installer/windows_stub_script-i.ri
 share/ri/${REV}/system/Gem/Installer/wrappers-i.ri
 share/ri/${REV}/system/Gem/Installer/write_build_info_file-i.ri
Index: 2.6/Makefile
===================================================================
RCS file: /cvs/ports/lang/ruby/2.6/Makefile,v
retrieving revision 1.2
diff -u -p -r1.2 Makefile
--- 2.6/Makefile 1 Feb 2019 16:24:59 -0000 1.2
+++ 2.6/Makefile 13 Mar 2019 17:23:29 -0000
@@ -1,6 +1,6 @@
 # $OpenBSD: Makefile,v 1.2 2019/02/01 16:24:59 jeremy Exp $
 
-VERSION = 2.6.1
+VERSION = 2.6.2
 DISTNAME = ruby-${VERSION}
 SHARED_LIBS = ruby26 0.0
 NEXTVER = 2.7
Index: 2.6/distinfo
===================================================================
RCS file: /cvs/ports/lang/ruby/2.6/distinfo,v
retrieving revision 1.2
diff -u -p -r1.2 distinfo
--- 2.6/distinfo 1 Feb 2019 16:24:59 -0000 1.2
+++ 2.6/distinfo 13 Mar 2019 17:23:38 -0000
@@ -1,2 +1,2 @@
-SHA256 (ruby-2.6.1.tar.gz) = FwJPt7sgPZz3paQseP9s53FA+dCDZ2BEp9tn8eUZHLg=
-SIZE (ruby-2.6.1.tar.gz) = 16742207
+SHA256 (ruby-2.6.2.tar.gz) = oEBdK/LC0vMyAztw3/NU0iSoZKsO3UYrekE0IEU7Sas=
+SIZE (ruby-2.6.2.tar.gz) = 16777765
Index: 2.6/pkg/PLIST-main
===================================================================
RCS file: /cvs/ports/lang/ruby/2.6/pkg/PLIST-main,v
retrieving revision 1.2
diff -u -p -r1.2 PLIST-main
--- 2.6/pkg/PLIST-main 1 Feb 2019 16:24:59 -0000 1.2
+++ 2.6/pkg/PLIST-main 13 Mar 2019 17:57:58 -0000
@@ -42,7 +42,7 @@ include/ruby-${REV}/ruby/util.h
 include/ruby-${REV}/ruby/version.h
 include/ruby-${REV}/ruby/vm.h
 include/ruby-${REV}/${SUB}/
-include/ruby-${REV}/${SUB}/rb_mjit_min_header-2.6.1.h
+include/ruby-${REV}/${SUB}/rb_mjit_min_header-2.6.2.h
 include/ruby-${REV}/${SUB}/ruby/
 include/ruby-${REV}/${SUB}/ruby/config.h
 lib/libruby26.so
Index: 2.6/pkg/PLIST-ri_docs
===================================================================
RCS file: /cvs/ports/lang/ruby/2.6/pkg/PLIST-ri_docs,v
retrieving revision 1.2
diff -u -p -r1.2 PLIST-ri_docs
--- 2.6/pkg/PLIST-ri_docs 1 Feb 2019 16:25:00 -0000 1.2
+++ 2.6/pkg/PLIST-ri_docs 13 Mar 2019 17:59:26 -0000
@@ -5658,7 +5658,7 @@ share/ri/${REV}/system/Gem/Installer/she
 share/ri/${REV}/system/Gem/Installer/spec-i.ri
 share/ri/${REV}/system/Gem/Installer/spec_file-i.ri
 share/ri/${REV}/system/Gem/Installer/unpack-i.ri
-share/ri/${REV}/system/Gem/Installer/verify_spec_name-i.ri
+share/ri/${REV}/system/Gem/Installer/verify_spec-i.ri
 share/ri/${REV}/system/Gem/Installer/windows_stub_script-i.ri
 share/ri/${REV}/system/Gem/Installer/wrappers-i.ri
 share/ri/${REV}/system/Gem/Installer/write_build_info_file-i.ri
@@ -6064,6 +6064,7 @@ share/ri/${REV}/system/Gem/Requirement/%
 share/ri/${REV}/system/Gem/Requirement/%3d%7e-i.ri
 share/ri/${REV}/system/Gem/Requirement/BadRequirementError/
 share/ri/${REV}/system/Gem/Requirement/BadRequirementError/cdesc-BadRequirementError.ri
+share/ri/${REV}/system/Gem/Requirement/_tilde_requirements-i.ri
 share/ri/${REV}/system/Gem/Requirement/cdesc-Requirement.ri
 share/ri/${REV}/system/Gem/Requirement/concat-i.ri
 share/ri/${REV}/system/Gem/Requirement/create-c.ri
@@ -17630,6 +17631,8 @@ share/ri/${REV}/system/cache.ri
 share/ri/${REV}/system/fatal/
 share/ri/${REV}/system/fatal/cdesc-fatal.ri
 share/ri/${REV}/system/lib/
+share/ri/${REV}/system/lib/bundler/
+share/ri/${REV}/system/lib/bundler/page-bundler_gemspec.ri
 share/ri/${REV}/system/lib/csv/
 share/ri/${REV}/system/lib/csv/page-csv_gemspec.ri
 share/ri/${REV}/system/lib/forwardable/