diff options
| author | taca <taca@pkgsrc.org> | 2021-02-11 14:23:41 +0000 |
|---|---|---|
| committer | taca <taca@pkgsrc.org> | 2021-02-11 14:23:41 +0000 |
| commit | a6e9fa57a875b0c67dd4b999ed5c57cb3beabd28 (patch) | |
| tree | cdba7dff67b24ba69f688697e469893d64ae418c /lang/ruby | |
| parent | af1e1ad0f5088a83883feaa87c4143ac32a7fe0b (diff) | |
| download | pkgsrc-a6e9fa57a875b0c67dd4b999ed5c57cb3beabd28.tar.gz | |
www/rails52: update to 5.2.4.5
## Rails 5.2.4.5 (February 10, 2021) ##
* Fix possible DoS vector in PostgreSQL money type
Carefully crafted input can cause a DoS via the regular expressions used
for validating the money format in the PostgreSQL adapter. This patch
fixes the regexp.
Thanks to @dee-see from Hackerone for this patch!
[CVE-2021-22880]
*Aaron Patterson*
Diffstat (limited to 'lang/ruby')
| -rw-r--r-- | lang/ruby/rails.mk | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/lang/ruby/rails.mk b/lang/ruby/rails.mk index 0ed013f67ae..980e625fdab 100644 --- a/lang/ruby/rails.mk +++ b/lang/ruby/rails.mk @@ -1,4 +1,4 @@ -# $NetBSD: rails.mk,v 1.91 2020/10/19 14:50:31 taca Exp $ +# $NetBSD: rails.mk,v 1.92 2021/02/11 14:23:41 taca Exp $ .if !defined(_RUBY_RAILS_MK) _RUBY_RAILS_MK= # defined @@ -47,7 +47,7 @@ _RUBY_RAILS_MK= # defined # # current Ruby on Rails versions. # -RUBY_RAILS52_VERSION?= 5.2.4.4 +RUBY_RAILS52_VERSION?= 5.2.4.5 RUBY_RAILS60_VERSION?= 6.0.3.4 RUBY_RAILS_ACCEPTED?= # defined |