diff options
| author | taca <taca@pkgsrc.org> | 2021-08-22 07:12:49 +0000 |
|---|---|---|
| committer | taca <taca@pkgsrc.org> | 2021-08-22 07:12:49 +0000 |
| commit | d852ac530634013f85b107dd160016e9a0edd006 (patch) | |
| tree | 1f16eba48fb468058585606b1c5b8cac788feed9 /lang | |
| parent | c98380b0a1c15b7cb5c405778c5a6c5274349d11 (diff) | |
| download | pkgsrc-d852ac530634013f85b107dd160016e9a0edd006.tar.gz | |
www/ruby-rails60: update to 6.0.4.1
Update Ruby on Rails 6.0 pacakges to 6.0.4.1.
Real changes are in Action Pack (www/ruby-actionpack60).
## Rails 6.0.4.1 (August 19, 2021) ##
* [CVE-2021-22942] Fix possible open redirect in Host Authorization middleware.
Specially crafted "X-Forwarded-Host" headers in combination with certain
"allowed host" formats can cause the Host Authorization middleware in Action
Pack to redirect users to a malicious website.
Diffstat (limited to 'lang')
| -rw-r--r-- | lang/ruby/rails.mk | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/lang/ruby/rails.mk b/lang/ruby/rails.mk index 101584e642d..37d653b21cc 100644 --- a/lang/ruby/rails.mk +++ b/lang/ruby/rails.mk @@ -1,4 +1,4 @@ -# $NetBSD: rails.mk,v 1.104 2021/07/13 11:53:25 markd Exp $ +# $NetBSD: rails.mk,v 1.105 2021/08/22 07:12:49 taca Exp $ .if !defined(_RUBY_RAILS_MK) _RUBY_RAILS_MK= # defined @@ -48,7 +48,7 @@ _RUBY_RAILS_MK= # defined # current Ruby on Rails versions. # RUBY_RAILS52_VERSION?= 5.2.6 -RUBY_RAILS60_VERSION?= 6.0.4 +RUBY_RAILS60_VERSION?= 6.0.4.1 RUBY_RAILS61_VERSION?= 6.1.4 RUBY_RAILS_ACCEPTED?= # defined |