ruby:2.5 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has
features to process text files and to perform system management tasks.

Security Fix(es):

* ruby: Regular expression denial of service vulnerability of Date parsing
methods (CVE-2021-41817)
* ruby: Cookie prefix spoofing in CGI::Cookie.parse (CVE-2021-41819)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE-2021-41817
Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular
expression Denial of Service) via a long string. The fixed versions are 3.2.1,
3.1.2, 3.0.2, and 2.0.1.
CVE-2021-41819
CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie
names. This also affects the CGI gem through 0.3.0 for Ruby.

Modularity name: ruby
Stream name: 2.5