Log message:
Pullup ticket #6734 - requested by taca
databases/ruby-activerecord70: security update
devel/ruby-activejob70: distinfo update
devel/ruby-activemodel70: distinfo update
devel/ruby-activestorage70: distinfo update
devel/ruby-activesupport70: security update
devel/ruby-railties70: distinfo update
mail/ruby-actionmailbox70: distinfo update
mail/ruby-actionmailer70: distinfo update
textproc/ruby-actiontext70: distinfo update
www/ruby-actioncable70: distinfo update
www/ruby-actionpack70: security update
www/ruby-actionview70: distinfo update
www/ruby-rails70: distinfo update

Revisions pulled up:
- databases/ruby-activerecord70/distinfo                        1.9-1.10
- devel/ruby-activejob70/distinfo                               1.9-1.10
- devel/ruby-activemodel70/distinfo                             1.9-1.10
- devel/ruby-activestorage70/distinfo                           1.9-1.10
- devel/ruby-activesupport70/distinfo                           1.9-1.10
- devel/ruby-railties70/distinfo                                1.9-1.10
- lang/ruby/rails.mk                                            1.140,1.142
- mail/ruby-actionmailbox70/distinfo                            1.9-1.10
- mail/ruby-actionmailer70/distinfo                             1.9-1.10
- textproc/ruby-actiontext70/distinfo                           1.9-1.10
- www/ruby-actioncable70/distinfo                               1.9-1.10
- www/ruby-actionpack70/distinfo                                1.9-1.10
- www/ruby-actionview70/distinfo                                1.9-1.10
- www/ruby-rails70/distinfo                                     1.9-1.10

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Jan 19 14:34:27 UTC 2023

   Modified Files:
   	pkgsrc/databases/ruby-activerecord70: distinfo
   	pkgsrc/devel/ruby-activejob70: distinfo
   	pkgsrc/devel/ruby-activemodel70: distinfo
   	pkgsrc/devel/ruby-activestorage70: distinfo
   	pkgsrc/devel/ruby-activesupport70: distinfo
   	pkgsrc/devel/ruby-railties70: distinfo
   	pkgsrc/lang/ruby: rails.mk
   	pkgsrc/mail/ruby-actionmailbox70: distinfo
   	pkgsrc/mail/ruby-actionmailer70: distinfo
   	pkgsrc/textproc/ruby-actiontext70: distinfo
   	pkgsrc/www/ruby-actioncable70: distinfo
   	pkgsrc/www/ruby-actionpack70: Makefile distinfo
   	pkgsrc/www/ruby-actionview70: distinfo
   	pkgsrc/www/ruby-rails70: distinfo

   Log message:
   www/ruby-rails70: update to 7.0.4.1

   Rails 7.0.4.1 (2023-01-17)

   devel/ruby-activesupport70

   * Avoid regex backtracking in Inflector.underscore

     [CVE-2023-22796]

   www/ruby-actionpack70

   * Fix sec issue with _url_host_allowed?

     Disallow certain strings from `_url_host_allowed?` to avoid a redirect
     to malicious sites.

     [CVE-2023-22797]

   * Avoid regex backtracking on If-None-Match header

     [CVE-2023-22795]

   * Use string#split instead of regex for domain parts

     [CVE-2023-22792]

   databases/ruby-activerecord70

   * Make sanitize_as_sql_comment more strict

     Though this method was likely never meant to take user input, it was
     attempting sanitization. That sanitization could be bypassed with
     carefully crafted input.

     This commit makes the sanitization more robust by replacing any
     occurrances of "/*" or "*/" with "/ *" or \ 
"* /". It also performs a
     first pass to remove one surrounding comment to avoid compatibility
     issues for users relying on the existing removal.

     This also clarifies in the documentation of annotate that it should not
     be provided user input.

     [CVE-2023-22794]

   * Added integer width check to PostgreSQL::Quoting

     Given a value outside the range for a 64bit signed integer type
     PostgreSQL will treat the column type as numeric. Comparing
     integer values against numeric values can result in a slow
     sequential scan.

     This behavior is configurable via
     ActiveRecord::Base.raise_int_wider_than_64bit which defaults to true.

     [CVE-2022-44566]

   To generate a diff of this commit:
   cvs rdiff -u -r1.8 -r1.9 pkgsrc/databases/ruby-activerecord70/distinfo
   cvs rdiff -u -r1.8 -r1.9 pkgsrc/devel/ruby-activejob70/distinfo
   cvs rdiff -u -r1.8 -r1.9 pkgsrc/devel/ruby-activemodel70/distinfo
   cvs rdiff -u -r1.8 -r1.9 pkgsrc/devel/ruby-activestorage70/distinfo
   cvs rdiff -u -r1.8 -r1.9 pkgsrc/devel/ruby-activesupport70/distinfo
   cvs rdiff -u -r1.8 -r1.9 pkgsrc/devel/ruby-railties70/distinfo
   cvs rdiff -u -r1.139 -r1.140 pkgsrc/lang/ruby/rails.mk
   cvs rdiff -u -r1.8 -r1.9 pkgsrc/mail/ruby-actionmailbox70/distinfo
   cvs rdiff -u -r1.8 -r1.9 pkgsrc/mail/ruby-actionmailer70/distinfo
   cvs rdiff -u -r1.8 -r1.9 pkgsrc/textproc/ruby-actiontext70/distinfo
   cvs rdiff -u -r1.8 -r1.9 pkgsrc/www/ruby-actioncable70/distinfo
   cvs rdiff -u -r1.5 -r1.6 pkgsrc/www/ruby-actionpack70/Makefile
   cvs rdiff -u -r1.8 -r1.9 pkgsrc/www/ruby-actionpack70/distinfo
   cvs rdiff -u -r1.8 -r1.9 pkgsrc/www/ruby-actionview70/distinfo
   cvs rdiff -u -r1.8 -r1.9 pkgsrc/www/ruby-rails70/distinfo

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Jan 25 13:31:17 UTC 2023

   Modified Files:
   	pkgsrc/databases/ruby-activerecord70: distinfo
   	pkgsrc/devel/ruby-activejob70: distinfo
   	pkgsrc/devel/ruby-activemodel70: distinfo
   	pkgsrc/devel/ruby-activestorage70: distinfo
   	pkgsrc/devel/ruby-activesupport70: distinfo
   	pkgsrc/devel/ruby-railties70: distinfo
   	pkgsrc/lang/ruby: rails.mk
   	pkgsrc/mail/ruby-actionmailbox70: distinfo
   	pkgsrc/mail/ruby-actionmailer70: distinfo
   	pkgsrc/textproc/ruby-actiontext70: distinfo
   	pkgsrc/www/ruby-actioncable70: distinfo
   	pkgsrc/www/ruby-actionpack70: distinfo
   	pkgsrc/www/ruby-actionview70: distinfo
   	pkgsrc/www/ruby-rails70: distinfo

   Log message:
   www/ruby-rails70: update to 7.0.4.2

   Rails 7.0.4.2 (2023-01-24)

   *   Fix `domain: :all` for two letter TLD

       This fixes a compatibility issue introduced in our previous security
       release when using `domain: :all` with a two letter but single level top
       level domain domain (like `.ca`, rather than `.co.uk`).

   To generate a diff of this commit:
   cvs rdiff -u -r1.9 -r1.10 pkgsrc/databases/ruby-activerecord70/distinfo
   cvs rdiff -u -r1.9 -r1.10 pkgsrc/devel/ruby-activejob70/distinfo
   cvs rdiff -u -r1.9 -r1.10 pkgsrc/devel/ruby-activemodel70/distinfo
   cvs rdiff -u -r1.9 -r1.10 pkgsrc/devel/ruby-activestorage70/distinfo
   cvs rdiff -u -r1.9 -r1.10 pkgsrc/devel/ruby-activesupport70/distinfo
   cvs rdiff -u -r1.9 -r1.10 pkgsrc/devel/ruby-railties70/distinfo
   cvs rdiff -u -r1.141 -r1.142 pkgsrc/lang/ruby/rails.mk
   cvs rdiff -u -r1.9 -r1.10 pkgsrc/mail/ruby-actionmailbox70/distinfo
   cvs rdiff -u -r1.9 -r1.10 pkgsrc/mail/ruby-actionmailer70/distinfo
   cvs rdiff -u -r1.9 -r1.10 pkgsrc/textproc/ruby-actiontext70/distinfo
   cvs rdiff -u -r1.9 -r1.10 pkgsrc/www/ruby-actioncable70/distinfo
   cvs rdiff -u -r1.9 -r1.10 pkgsrc/www/ruby-actionpack70/distinfo
   cvs rdiff -u -r1.9 -r1.10 pkgsrc/www/ruby-actionview70/distinfo
   cvs rdiff -u -r1.9 -r1.10 pkgsrc/www/ruby-rails70/distinfo

Log message:
Pullup ticket #6733 - requested by taca
databases/ruby-activerecord61: security update
devel/ruby-activejob61: distinfo update
devel/ruby-activemodel61: distinfo update
devel/ruby-activestorage61: distinfo update
devel/ruby-activesupport61: security update
devel/ruby-railties61: distinfo update
mail/ruby-actionmailbox61: distinfo update
mail/ruby-actionmailer61: distinfo update
textproc/ruby-actiontext61: sdistinfo update
www/ruby-actioncable61: distinfo update
www/ruby-actionpack61: security update
www/ruby-actionview61: distinfo update
www/ruby-rails61: distinfo update

Revisions pulled up:
- databases/ruby-activerecord61/distinfo                        1.16-1.17
- devel/ruby-activejob61/distinfo                               1.16-1.17
- devel/ruby-activemodel61/distinfo                             1.16-1.17
- devel/ruby-activestorage61/distinfo                           1.16-1.17
- devel/ruby-activesupport61/distinfo                           1.16-1.17
- devel/ruby-railties61/distinfo                                1.16-1.17
- lang/ruby/rails.mk                                            1.139,1.141
- mail/ruby-actionmailbox61/distinfo                            1.16-1.17
- mail/ruby-actionmailer61/distinfo                             1.16-1.17
- textproc/ruby-actiontext61/distinfo                           1.16-1.17
- www/ruby-actioncable61/distinfo                               1.16-1.17
- www/ruby-actionpack61/Makefile                                1.4
- www/ruby-actionpack61/distinfo                                1.16-1.17
- www/ruby-actionview61/distinfo                                1.16-1.17
- www/ruby-rails61/distinfo                                     1.16-1.17

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Jan 19 14:31:11 UTC 2023

   Modified Files:
   	pkgsrc/databases/ruby-activerecord61: distinfo
   	pkgsrc/devel/ruby-activejob61: distinfo
   	pkgsrc/devel/ruby-activemodel61: distinfo
   	pkgsrc/devel/ruby-activestorage61: distinfo
   	pkgsrc/devel/ruby-activesupport61: distinfo
   	pkgsrc/devel/ruby-railties61: distinfo
   	pkgsrc/lang/ruby: rails.mk
   	pkgsrc/mail/ruby-actionmailbox61: distinfo
   	pkgsrc/mail/ruby-actionmailer61: distinfo
   	pkgsrc/textproc/ruby-actiontext61: distinfo
   	pkgsrc/www/ruby-actioncable61: distinfo
   	pkgsrc/www/ruby-actionpack61: Makefile distinfo
   	pkgsrc/www/ruby-actionview61: distinfo
   	pkgsrc/www/ruby-rails61: distinfo

   Log message:
   www/ruby-rails61: update to 6.1.7.1

   Rails 6.1.7.1 (2023-01-17)

   devel/ruby-activesupport61

   * Avoid regex backtracking in Inflector.underscore

       [CVE-2023-22796]

   www/ruby-actionpack61

   * Avoid regex backtracking on If-None-Match header

     [CVE-2023-22795]

   * Use string#split instead of regex for domain parts

     [CVE-2023-22792]

   databases/ruby-activerecord61

   * Make sanitize_as_sql_comment more strict

     Though this method was likely never meant to take user input, it was
     attempting sanitization. That sanitization could be bypassed with
     carefully crafted input.

     This commit makes the sanitization more robust by replacing any
     occurrances of "/*" or "*/" with "/ *" or \ 
"* /". It also performs a
     first pass to remove one surrounding comment to avoid compatibility
     issues for users relying on the existing removal.

     This also clarifies in the documentation of annotate that it should not
     be provided user input.

     [CVE-2023-22794]

   * Added integer width check to PostgreSQL::Quoting

     Given a value outside the range for a 64bit signed integer type
     PostgreSQL will treat the column type as numeric. Comparing
     integer values against numeric values can result in a slow
     sequential scan.

     This behavior is configurable via
     ActiveRecord::Base.raise_int_wider_than_64bit which defaults to true.

     [CVE-2022-44566]

   To generate a diff of this commit:
   cvs rdiff -u -r1.15 -r1.16 pkgsrc/databases/ruby-activerecord61/distinfo
   cvs rdiff -u -r1.15 -r1.16 pkgsrc/devel/ruby-activejob61/distinfo
   cvs rdiff -u -r1.15 -r1.16 pkgsrc/devel/ruby-activemodel61/distinfo
   cvs rdiff -u -r1.15 -r1.16 pkgsrc/devel/ruby-activestorage61/distinfo
   cvs rdiff -u -r1.15 -r1.16 pkgsrc/devel/ruby-activesupport61/distinfo
   cvs rdiff -u -r1.15 -r1.16 pkgsrc/devel/ruby-railties61/distinfo
   cvs rdiff -u -r1.138 -r1.139 pkgsrc/lang/ruby/rails.mk
   cvs rdiff -u -r1.15 -r1.16 pkgsrc/mail/ruby-actionmailbox61/distinfo
   cvs rdiff -u -r1.15 -r1.16 pkgsrc/mail/ruby-actionmailer61/distinfo
   cvs rdiff -u -r1.15 -r1.16 pkgsrc/textproc/ruby-actiontext61/distinfo
   cvs rdiff -u -r1.15 -r1.16 pkgsrc/www/ruby-actioncable61/distinfo
   cvs rdiff -u -r1.3 -r1.4 pkgsrc/www/ruby-actionpack61/Makefile
   cvs rdiff -u -r1.15 -r1.16 pkgsrc/www/ruby-actionpack61/distinfo
   cvs rdiff -u -r1.15 -r1.16 pkgsrc/www/ruby-actionview61/distinfo
   cvs rdiff -u -r1.15 -r1.16 pkgsrc/www/ruby-rails61/distinfo

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Jan 25 13:27:10 UTC 2023

   Modified Files:
   	pkgsrc/databases/ruby-activerecord61: distinfo
   	pkgsrc/devel/ruby-activejob61: distinfo
   	pkgsrc/devel/ruby-activemodel61: distinfo
   	pkgsrc/devel/ruby-activestorage61: distinfo
   	pkgsrc/devel/ruby-activesupport61: distinfo
   	pkgsrc/devel/ruby-railties61: distinfo
   	pkgsrc/lang/ruby: rails.mk
   	pkgsrc/mail/ruby-actionmailbox61: distinfo
   	pkgsrc/mail/ruby-actionmailer61: distinfo
   	pkgsrc/textproc/ruby-actiontext61: distinfo
   	pkgsrc/www/ruby-actioncable61: distinfo
   	pkgsrc/www/ruby-actionpack61: distinfo
   	pkgsrc/www/ruby-actionview61: distinfo
   	pkgsrc/www/ruby-rails61: distinfo

   Log message:
   www/ruby-rails61: update to 6.1.7.2

   Rails 6.1.7.2 (2023-01-24)

   www/ruby-actionpack61

   *   Fix `domain: :all` for two letter TLD

       This fixes a compatibility issue introduced in our previous security
       release when using `domain: :all` with a two letter but single level top
       level domain domain (like `.ca`, rather than `.co.uk`).

   To generate a diff of this commit:
   cvs rdiff -u -r1.16 -r1.17 pkgsrc/databases/ruby-activerecord61/distinfo
   cvs rdiff -u -r1.16 -r1.17 pkgsrc/devel/ruby-activejob61/distinfo
   cvs rdiff -u -r1.16 -r1.17 pkgsrc/devel/ruby-activemodel61/distinfo
   cvs rdiff -u -r1.16 -r1.17 pkgsrc/devel/ruby-activestorage61/distinfo
   cvs rdiff -u -r1.16 -r1.17 pkgsrc/devel/ruby-activesupport61/distinfo
   cvs rdiff -u -r1.16 -r1.17 pkgsrc/devel/ruby-railties61/distinfo
   cvs rdiff -u -r1.140 -r1.141 pkgsrc/lang/ruby/rails.mk
   cvs rdiff -u -r1.16 -r1.17 pkgsrc/mail/ruby-actionmailbox61/distinfo
   cvs rdiff -u -r1.16 -r1.17 pkgsrc/mail/ruby-actionmailer61/distinfo
   cvs rdiff -u -r1.16 -r1.17 pkgsrc/textproc/ruby-actiontext61/distinfo
   cvs rdiff -u -r1.16 -r1.17 pkgsrc/www/ruby-actioncable61/distinfo
   cvs rdiff -u -r1.16 -r1.17 pkgsrc/www/ruby-actionpack61/distinfo
   cvs rdiff -u -r1.16 -r1.17 pkgsrc/www/ruby-actionview61/distinfo
   cvs rdiff -u -r1.16 -r1.17 pkgsrc/www/ruby-rails61/distinfo

Log message:
Pullup ticket #6732 - requested by taca
databases/ruby-activerecord60: security update
devel/ruby-activejob60: distinfo update
devel/ruby-activemodel60: distinfo update
devel/ruby-activestorage60: distinfo update
devel/ruby-activesupport60: distinfo update
devel/ruby-railties60: distinfo update
mail/ruby-actionmailbox60: distinfo update
mail/ruby-actionmailer60: distinfo update
textproc/ruby-actiontext60: distinfo update
www/ruby-actioncable60: distinfo update
www/ruby-actionpack60: distinfo update
www/ruby-actionpack60: distinfo update
www/ruby-actionview60: distinfo update
www/ruby-rails60: distinfo update

Revisions pulled up:
- databases/ruby-activerecord60/distinfo                        1.21
- devel/ruby-activejob60/distinfo                               1.21
- devel/ruby-activemodel60/distinfo                             1.21
- devel/ruby-activestorage60/distinfo                           1.21
- devel/ruby-activesupport60/distinfo                           1.21
- devel/ruby-railties60/distinfo                                1.21
- lang/ruby/rails.mk                                            1.138
- mail/ruby-actionmailbox60/distinfo                            1.21
- mail/ruby-actionmailer60/distinfo                             1.21
- textproc/ruby-actiontext60/distinfo                           1.21
- www/ruby-actioncable60/distinfo                               1.21
- www/ruby-actionpack60/Makefile                                1.5
- www/ruby-actionpack60/distinfo                                1.21
- www/ruby-actionview60/distinfo                                1.21
- www/ruby-rails60/distinfo                                     1.21

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Jan 19 14:27:26 UTC 2023

   Modified Files:
   	pkgsrc/databases/ruby-activerecord60: distinfo
   	pkgsrc/devel/ruby-activejob60: distinfo
   	pkgsrc/devel/ruby-activemodel60: distinfo
   	pkgsrc/devel/ruby-activestorage60: distinfo
   	pkgsrc/devel/ruby-activesupport60: distinfo
   	pkgsrc/devel/ruby-railties60: distinfo
   	pkgsrc/lang/ruby: rails.mk
   	pkgsrc/mail/ruby-actionmailbox60: distinfo
   	pkgsrc/mail/ruby-actionmailer60: distinfo
   	pkgsrc/textproc/ruby-actiontext60: distinfo
   	pkgsrc/www/ruby-actioncable60: distinfo
   	pkgsrc/www/ruby-actionpack60: Makefile distinfo
   	pkgsrc/www/ruby-actionview60: distinfo
   	pkgsrc/www/ruby-rails60: distinfo

   Log message:
   www/ruby-rails60: update to 6.0.6.1

   Only databases/ruby-activerecord61 has updated.

   Rails 6.0.6.1 (2023-01-17)

   * Make `sanitize_as_sql_comment` more strict

     Though this method was likely never meant to take user input, it was
     attempting sanitization. That sanitization could be bypassed with
     carefully crafted input.

     This commit makes the sanitization more robust by replacing any
     occurrances of "/*" or "*/" with "/ *" or \ 
"* /". It also performs a
     first pass to remove one surrounding comment to avoid compatibility
     issues for users relying on the existing removal.

     This also clarifies in the documentation of annotate that it should not
     be provided user input.

     [CVE-2023-22794]

   To generate a diff of this commit:
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/databases/ruby-activerecord60/distinfo
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/devel/ruby-activejob60/distinfo
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/devel/ruby-activemodel60/distinfo
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/devel/ruby-activestorage60/distinfo
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/devel/ruby-activesupport60/distinfo
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/devel/ruby-railties60/distinfo
   cvs rdiff -u -r1.137 -r1.138 pkgsrc/lang/ruby/rails.mk
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/mail/ruby-actionmailbox60/distinfo
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/mail/ruby-actionmailer60/distinfo
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/textproc/ruby-actiontext60/distinfo
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/www/ruby-actioncable60/distinfo
   cvs rdiff -u -r1.4 -r1.5 pkgsrc/www/ruby-actionpack60/Makefile
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/www/ruby-actionpack60/distinfo
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/www/ruby-actionview60/distinfo
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/www/ruby-rails60/distinfo