Skip to content

Commit 4e2781f

Browse files
author
taca
committed
www/ruby-cgi: add package version 0.4.2
ruby-cgi contains newer version of cgi gem which is default gem of Ruby. This package intends to handle these security problem of cgi gem in Ruby. CVE-2025-27219: Denial of Service in CGI::Cookie.parse CVE-2025-27220: ReDoS in CGI::Util#escapeElement CVE-2025-27221: userinfo leakage in URI#join, URI#merge and URI#+ CGI CGI is a large class, providing several categories of methods, many of which are mixed in from other modules. Some of the documentation is in this class, some in the modules CGI::QueryExtension and CGI::HtmlExtension. See CGI::Cookie for specific information on handling cookies, and cgi/session.rb (CGI::Session) for information on sessions. For queries, CGI provides methods to get at environmental variables, parameters, cookies, and multipart request data. For responses, CGI provides methods for writing output and generating HTML.
1 parent c9286b5 commit 4e2781f

4 files changed

Lines changed: 49 additions & 0 deletions

File tree

www/ruby-cgi/DESCR

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
CGI
2+
3+
CGI is a large class, providing several categories of methods, many of which
4+
are mixed in from other modules. Some of the documentation is in this
5+
class, some in the modules CGI::QueryExtension and CGI::HtmlExtension. See
6+
CGI::Cookie for specific information on handling cookies, and cgi/session.rb
7+
(CGI::Session) for information on sessions.
8+
9+
For queries, CGI provides methods to get at environmental variables,
10+
parameters, cookies, and multipart request data. For responses, CGI
11+
provides methods for writing output and generating HTML.

www/ruby-cgi/Makefile

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
# $NetBSD: Makefile,v 1.1 2025/03/02 14:51:54 taca Exp $
2+
3+
DISTNAME= cgi-0.4.2
4+
CATEGORIES= www
5+
6+
MAINTAINER= pkgsrc-users@NetBSD.org
7+
HOMEPAGE= https://github.com/ruby/cgi
8+
COMMENT= Support for the Common Gateway Interface protocol
9+
LICENSE= 2-clause-bsd OR ruby-license
10+
11+
#USE_LANGUAGES= # none
12+
13+
.include "../../lang/ruby/gem.mk"
14+
.include "../../mk/bsd.pkg.mk"

www/ruby-cgi/PLIST

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
@comment $NetBSD: PLIST,v 1.1 2025/03/02 14:51:54 taca Exp $
2+
${GEM_HOME}/cache/${GEM_NAME}.gem
3+
${GEM_EXTSDIR}/cgi/escape.${RUBY_DLEXT}
4+
${GEM_EXTSDIR}/gem.build_complete
5+
${GEM_LIBDIR}/BSDL
6+
${GEM_LIBDIR}/COPYING
7+
${GEM_LIBDIR}/README.md
8+
${GEM_LIBDIR}/ext/cgi/escape/depend
9+
${GEM_LIBDIR}/ext/cgi/escape/escape.c
10+
${GEM_LIBDIR}/ext/cgi/escape/extconf.rb
11+
${GEM_LIBDIR}/lib/cgi.rb
12+
${GEM_LIBDIR}/lib/cgi/cookie.rb
13+
${GEM_LIBDIR}/lib/cgi/core.rb
14+
${GEM_LIBDIR}/lib/cgi/escape.${RUBY_DLEXT}
15+
${GEM_LIBDIR}/lib/cgi/html.rb
16+
${GEM_LIBDIR}/lib/cgi/session.rb
17+
${GEM_LIBDIR}/lib/cgi/session/pstore.rb
18+
${GEM_LIBDIR}/lib/cgi/util.rb
19+
${GEM_HOME}/specifications/${GEM_NAME}.gemspec

www/ruby-cgi/distinfo

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
$NetBSD: distinfo,v 1.1 2025/03/02 14:51:54 taca Exp $
2+
3+
BLAKE2s (cgi-0.4.2.gem) = 7b6edec906877c6aae68b467f658d6de38c1de5b32b5147914564400c74e956b
4+
SHA512 (cgi-0.4.2.gem) = 40c736597d2bea6c61087449ad98a01d843d8922ffa218fbb29e138d7b86e37800165c049f1f444274ad668d67f95d90c408df8e513dd618dd9e9f905787430f
5+
Size (cgi-0.4.2.gem) = 37888 bytes

0 commit comments

Comments
 (0)