diff options
| author | taca <taca@pkgsrc.org> | 2022-07-13 14:41:07 +0000 |
|---|---|---|
| committer | taca <taca@pkgsrc.org> | 2022-07-13 14:41:07 +0000 |
| commit | 6eb4aeb7bc355f334f698b432bca739509c1978b (patch) | |
| tree | ab777629edf813126562f7971105e6c6699f7e64 /databases | |
| parent | 61819dba4f0543a684b468049bdc4d0ef8042c07 (diff) | |
| download | pkgsrc-6eb4aeb7bc355f334f698b432bca739509c1978b.tar.gz | |
www/ruby-rails52: update to 5.2.8.1
Rails 5.2.8.1 (2022-07-12) updates databases/ruby-activerecord52 only.
databases/ruby-activerecord52
* Change ActiveRecord::Coders::YAMLColumn default to safe_load
This adds two new configuration options The configuration options are as
follows:
o config.active_storage.use_yaml_unsafe_load
When set to true, this configuration option tells Rails to use the old
"unsafe" YAML loading strategy, maintaining the existing behavior but
leaving the possible escalation vulnerability in place. Setting this
option to true is *not* recommended, but can aid in upgrading.
o config.active_record.yaml_column_permitted_classes
The "safe YAML" loading method does not allow all classes to be
deserialized by default. This option allows you to specify classes deemed
"safe" in your application. For example, if your application uses Symbol
and Time in serialized data, you can add Symbol and Time to the allowed
list as follows:
config.active_record.yaml_column_permitted_classes = [Symbol, Date, Time]
[CVE-2022-32224]
Diffstat (limited to 'databases')
| -rw-r--r-- | databases/ruby-activerecord52/distinfo | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/databases/ruby-activerecord52/distinfo b/databases/ruby-activerecord52/distinfo index 95a52b3b90a..301ec819876 100644 --- a/databases/ruby-activerecord52/distinfo +++ b/databases/ruby-activerecord52/distinfo @@ -1,5 +1,5 @@ -$NetBSD: distinfo,v 1.14 2022/06/07 14:48:12 taca Exp $ +$NetBSD: distinfo,v 1.15 2022/07/13 14:41:08 taca Exp $ -BLAKE2s (activerecord-5.2.8.gem) = 424c01dc0d7c4b8e3d8e363fb534bf6de40995d1d4d411b6edad7d1809e83ad0 -SHA512 (activerecord-5.2.8.gem) = e3c4ae2c318a9ac71a7ba2e7fcca69be238cd3433ebe9dde94e67d03d5da1dcdcd06c19aa8b828a8a796680b81cee330b041829fa90418661e7c6e96500afcc7 -Size (activerecord-5.2.8.gem) = 358400 bytes +BLAKE2s (activerecord-5.2.8.1.gem) = 3bb38557e307386380b2f386eb0a0e131f1ce82030d9d99933f620619387009e +SHA512 (activerecord-5.2.8.1.gem) = dd0a7b2f2b6cfcc968ca989ecd979a6e8326c2bf6474beb132b0f9e0298177fb916571fb219cf66b32aa20718a6d29cffcba60beee4a2449a2677306d989d49e +Size (activerecord-5.2.8.1.gem) = 359424 bytes |