diff options
| author | spz <spz@pkgsrc.org> | 2022-07-23 19:15:50 +0000 |
|---|---|---|
| committer | spz <spz@pkgsrc.org> | 2022-07-23 19:15:50 +0000 |
| commit | f3ad6f5e289b2506b80a7d547d38e1cd76d3c1a7 (patch) | |
| tree | f7881fc3e7889553151e985b4d8d71292cfa3382 /www | |
| parent | 5ff6e74449e32a0b5b4039cfd68c5e757034468d (diff) | |
| download | pkgsrc-f3ad6f5e289b2506b80a7d547d38e1cd76d3c1a7.tar.gz | |
Pullup ticket #6654 - requested by taca
databases/ruby-activerecord60: security update
devel/ruby-activejob60: security update
devel/ruby-activemodel60: security update
devel/ruby-activestorage60: security update
devel/ruby-activesupport60: security update
devel/ruby-railties60: security update
mail/ruby-actionmailbox60: security update
mail/ruby-actionmailer60: security update
textproc/ruby-actiontext60: security update
www/ruby-actioncable60: security update
www/ruby-actionpack60: security update
www/ruby-actionview60: security update
www/ruby-rails60: security update
Revisions pulled up:
- databases/ruby-activerecord60/distinfo 1.19
- devel/ruby-activejob60/distinfo 1.19
- devel/ruby-activemodel60/distinfo 1.19
- devel/ruby-activestorage60/distinfo 1.19
- devel/ruby-activesupport60/distinfo 1.19
- devel/ruby-railties60/Makefile 1.5
- devel/ruby-railties60/distinfo 1.19
- lang/ruby/rails.mk 1.130
- mail/ruby-actionmailbox60/distinfo 1.19
- mail/ruby-actionmailer60/distinfo 1.19
- textproc/ruby-actiontext60/distinfo 1.19
- www/ruby-actioncable60/distinfo 1.19
- www/ruby-actionpack60/distinfo 1.19
- www/ruby-actionview60/distinfo 1.19
- www/ruby-rails60/distinfo 1.19
-------------------------------------------------------------------
Module Name: pkgsrc
Committed By: taca
Date: Wed Jul 13 14:44:10 UTC 2022
Modified Files:
pkgsrc/databases/ruby-activerecord60: distinfo
pkgsrc/devel/ruby-activejob60: distinfo
pkgsrc/devel/ruby-activemodel60: distinfo
pkgsrc/devel/ruby-activestorage60: distinfo
pkgsrc/devel/ruby-activesupport60: distinfo
pkgsrc/devel/ruby-railties60: Makefile distinfo
pkgsrc/lang/ruby: rails.mk
pkgsrc/mail/ruby-actionmailbox60: distinfo
pkgsrc/mail/ruby-actionmailer60: distinfo
pkgsrc/textproc/ruby-actiontext60: distinfo
pkgsrc/www/ruby-actioncable60: distinfo
pkgsrc/www/ruby-actionpack60: distinfo
pkgsrc/www/ruby-actionview60: distinfo
pkgsrc/www/ruby-rails60: distinfo
Log Message:
www/ruby-rails60: update to 6.0.5.1
Rails 6.0.5.1 (2022-07-12) updates databases/ruby-activerecord60 only.
databases/ruby-activerecord60
* Change ActiveRecord::Coders::YAMLColumn default to safe_load
This adds two new configuration options The configuration options are as
follows:
o config.active_storage.use_yaml_unsafe_load
When set to true, this configuration option tells Rails to use the old
"unsafe" YAML loading strategy, maintaining the existing behavior but
leaving the possible escalation vulnerability in place. Setting this
option to true is *not* recommended, but can aid in upgrading.
o config.active_record.yaml_column_permitted_classes
The "safe YAML" loading method does not allow all classes to be
deserialized by default. This option allows you to specify classes deemed
"safe" in your application. For example, if your application uses Symbol
and Time in serialized data, you can add Symbol and Time to the allowed
list as follows:
config.active_record.yaml_column_permitted_classes = [Symbol, Date, Time]
[CVE-2022-32224]
To generate a diff of this commit:
cvs rdiff -u -r1.18 -r1.19 pkgsrc/databases/ruby-activerecord60/distinfo
cvs rdiff -u -r1.18 -r1.19 pkgsrc/devel/ruby-activejob60/distinfo
cvs rdiff -u -r1.18 -r1.19 pkgsrc/devel/ruby-activemodel60/distinfo
cvs rdiff -u -r1.18 -r1.19 pkgsrc/devel/ruby-activestorage60/distinfo
cvs rdiff -u -r1.18 -r1.19 pkgsrc/devel/ruby-activesupport60/distinfo
cvs rdiff -u -r1.4 -r1.5 pkgsrc/devel/ruby-railties60/Makefile
cvs rdiff -u -r1.18 -r1.19 pkgsrc/devel/ruby-railties60/distinfo
cvs rdiff -u -r1.129 -r1.130 pkgsrc/lang/ruby/rails.mk
cvs rdiff -u -r1.18 -r1.19 pkgsrc/mail/ruby-actionmailbox60/distinfo
cvs rdiff -u -r1.18 -r1.19 pkgsrc/mail/ruby-actionmailer60/distinfo
cvs rdiff -u -r1.18 -r1.19 pkgsrc/textproc/ruby-actiontext60/distinfo
cvs rdiff -u -r1.18 -r1.19 pkgsrc/www/ruby-actioncable60/distinfo
cvs rdiff -u -r1.18 -r1.19 pkgsrc/www/ruby-actionpack60/distinfo
cvs rdiff -u -r1.18 -r1.19 pkgsrc/www/ruby-actionview60/distinfo
cvs rdiff -u -r1.18 -r1.19 pkgsrc/www/ruby-rails60/distinfo
Diffstat (limited to 'www')
| -rw-r--r-- | www/ruby-actioncable60/distinfo | 8 | ||||
| -rw-r--r-- | www/ruby-actionpack60/distinfo | 8 | ||||
| -rw-r--r-- | www/ruby-actionview60/distinfo | 8 | ||||
| -rw-r--r-- | www/ruby-rails60/distinfo | 8 |
4 files changed, 16 insertions, 16 deletions
diff --git a/www/ruby-actioncable60/distinfo b/www/ruby-actioncable60/distinfo index b25df2818d1..1c4d440e71e 100644 --- a/www/ruby-actioncable60/distinfo +++ b/www/ruby-actioncable60/distinfo @@ -1,5 +1,5 @@ -$NetBSD: distinfo,v 1.18 2022/06/07 14:59:21 taca Exp $ +$NetBSD: distinfo,v 1.18.2.1 2022/07/23 19:15:52 spz Exp $ -BLAKE2s (actioncable-6.0.5.gem) = 1c640433d1cc60a1d765052df8a3f44528c8dbcfd89cdc514e58f97a4fc3ae77 -SHA512 (actioncable-6.0.5.gem) = 16f8ee68dc83742448e41123cea84ef9454d29b6b2f27d4a402f2400f530a9d789b992223feab699ee9222c12237703e6c226d460e65526e84b933f01e156c99 -Size (actioncable-6.0.5.gem) = 42496 bytes +BLAKE2s (actioncable-6.0.5.1.gem) = dc1808215a0d51cb5073aa5731bb15af573d7e5cf9ecd160bee4931715a88146 +SHA512 (actioncable-6.0.5.1.gem) = 1a43d099defc6b46ead99673e549b33c1ad2599c6c65b6576a07e5c373b08f390a9953a2ab5a46610fdad9e82547cd33e6698b57601956521ffc76244be44428 +Size (actioncable-6.0.5.1.gem) = 42496 bytes diff --git a/www/ruby-actionpack60/distinfo b/www/ruby-actionpack60/distinfo index 5038304e03b..ea6cc393b15 100644 --- a/www/ruby-actionpack60/distinfo +++ b/www/ruby-actionpack60/distinfo @@ -1,5 +1,5 @@ -$NetBSD: distinfo,v 1.18 2022/06/07 14:59:20 taca Exp $ +$NetBSD: distinfo,v 1.18.2.1 2022/07/23 19:15:52 spz Exp $ -BLAKE2s (actionpack-6.0.5.gem) = 28ef40dce28158ef4280b22278569cdbe88ae1b95b9801cb7e543f9f3bee34e1 -SHA512 (actionpack-6.0.5.gem) = 4f0c69377f8b22b44c3d5de63c73884ca69b51d701c87fd4f9436b1991c13477dd029ce8c7ebaafdf4137276da779c8b1e57774c59612d9189ffd79c87dc88b4 -Size (actionpack-6.0.5.gem) = 218624 bytes +BLAKE2s (actionpack-6.0.5.1.gem) = 81006d5c084ef09b910216339e1264c352c49e6403549c477a2992b37a5e938d +SHA512 (actionpack-6.0.5.1.gem) = 995d90f36820394f0d7b0fc1ea5be3aa38254a9812fa2f3410e31b62d3c276c281eba8c0bbf5aeba30af44d0027b6a9378118741bd93edaa4bbd05f7deb0fd05 +Size (actionpack-6.0.5.1.gem) = 218624 bytes diff --git a/www/ruby-actionview60/distinfo b/www/ruby-actionview60/distinfo index 3572969c6d7..0092550d275 100644 --- a/www/ruby-actionview60/distinfo +++ b/www/ruby-actionview60/distinfo @@ -1,5 +1,5 @@ -$NetBSD: distinfo,v 1.18 2022/06/07 14:59:20 taca Exp $ +$NetBSD: distinfo,v 1.18.2.1 2022/07/23 19:15:52 spz Exp $ -BLAKE2s (actionview-6.0.5.gem) = af9376f075698ea84aa5dde418643f57c9af6e25ef8d46a989c34bea7643ad2b -SHA512 (actionview-6.0.5.gem) = 9c5afc817588b572328623c5845f1cf71dcdc2373f11ccd75ff5e0e444b5b050bc4410f8e26b5c9910fbfb7d0665c0d3147ee15bea6bb4f608c70ce7fc268424 -Size (actionview-6.0.5.gem) = 170496 bytes +BLAKE2s (actionview-6.0.5.1.gem) = 8e6f0e99351d035f659db64efbc9d040eb8429f7d065dc0e9d6c67ef8000a9c8 +SHA512 (actionview-6.0.5.1.gem) = 74452b93bf43b2755fbb1ef488f1a483117dbd5978c9236b0b6ee601621888b519c9a813ad031023e5762bedfdb5b772342efda8195b9a173555d5fc450589b6 +Size (actionview-6.0.5.1.gem) = 170496 bytes diff --git a/www/ruby-rails60/distinfo b/www/ruby-rails60/distinfo index 2ee8c7c413c..5bd29231746 100644 --- a/www/ruby-rails60/distinfo +++ b/www/ruby-rails60/distinfo @@ -1,5 +1,5 @@ -$NetBSD: distinfo,v 1.18 2022/06/07 14:59:21 taca Exp $ +$NetBSD: distinfo,v 1.18.2.1 2022/07/23 19:15:52 spz Exp $ -BLAKE2s (rails-6.0.5.gem) = 0e2fcafcea557afe2d50b7b8940d889bbcfcd891c9071a723da758a79163b4ca -SHA512 (rails-6.0.5.gem) = 7ab1e1ae524b9e68f95f833f47908888a1699f5af6494102e66e7c7476924d4dc793228eaef78dda9a497e1988f8367c357a25e7df587b4c9fc9ddcdfa0eb7ce -Size (rails-6.0.5.gem) = 6656 bytes +BLAKE2s (rails-6.0.5.1.gem) = ac4c80fac5b4c369cf1a8eb47e11c8c4399663fd585e3f051ff376f434558f30 +SHA512 (rails-6.0.5.1.gem) = 881b5f0298fe2bb02ef52ce7f0df6bd0c7821f9a834957534d40ebc1603794b0b591b9ee326be328567f900946b26d46363c711fd3e4744ed351094bd477634b +Size (rails-6.0.5.1.gem) = 6656 bytes |