diff options
author | taca <taca@pkgsrc.org> | 2021-02-11 14:30:06 +0000 |
---|---|---|
committer | taca <taca@pkgsrc.org> | 2021-02-11 14:30:06 +0000 |
commit | 5df39e478abc6cb140240761dce26516634d11b0 (patch) | |
tree | d3e46b610cd3d4be56bb85673db6cb2f62c46563 /filesystems/fsx | |
parent | f96317c14b58c402ecdc890d1a8e20ad49bdc304 (diff) | |
download | pkgsrc-5df39e478abc6cb140240761dce26516634d11b0.tar.gz |
www/ruby-rails60: update to 6.0.3.5
databases/ruby-activerecord60:
## Rails 6.0.3.5 (February 10, 2021) ##
* Fix possible DoS vector in PostgreSQL money type
Carefully crafted input can cause a DoS via the regular expressions used
for validating the money format in the PostgreSQL adapter. This patch
fixes the regexp.
Thanks to @dee-see from Hackerone for this patch!
[CVE-2021-22880]
*Aaron Patterson*
www/ruby-actionpack60
## Rails 6.0.3.5 (February 10, 2021) ##
* Prevent open redirect when allowed host starts with a dot
[CVE-2021-22881]
Thanks to @tktech (https://hackerone.com/tktech) for reporting this
issue and the patch!
*Aaron Patterson*
Diffstat (limited to 'filesystems/fsx')
0 files changed, 0 insertions, 0 deletions