Next | Query returned 19 messages, browsing 11 to 20 | previous

History of commit frequency

CVS Commit History:


   2021-10-07 15:44:44 by Nia Alarie | Files touched by this commit (3017)
Log message:
devel: Remove SHA1 hashes for distfiles
   2021-07-04 08:24:47 by Takahiro Kambe | Files touched by this commit (12) | Package updated
Log message:
www/ruby-rails52: update to 5.2.6

Ruby on Rails 5.2.6 (2021-05-05)

There are changes in www/ruby-actionpack52 only, including security fix.

Action Pack

* Accept base64_urlsafe CSRF tokens to make forward compatible.

  Base64 strict-encoded CSRF tokens are not inherently websafe, which
  makes them difficult to deal with.  For example, the common practice
  of sending the CSRF token to a browser in a client-readable cookie
  does not work properly out of the box: the value has to be
  url-encoded and decoded to survive transport.

  In this version, we generate Base64 urlsafe-encoded CSRF tokens,
  which are inherently safe to transport.  Validation accepts both
  urlsafe tokens, and strict-encoded tokens for backwards
  compatibility.

  How the tokes are encoded is controllr by the
  action_controller.urlsafe_csrf_tokens config.

  In Rails 5.2.5, the CSRF token format was accidentally changed to
  urlsafe-encoded.

  Atention: If you already upgraded your application to 5.2.5, set the
  config urlsafe_csrf_tokens to true, otherwise your form submission
  will start to fail during the deploy of this new version.

	Rails.application.config.action_controller.urlsafe_csrf_tokens = true

  If you are upgrading from 5.2.4.x, you don't need to change this
  configuration.

  Scott Blum, Étienne Barrié
   2021-04-11 15:20:09 by Takahiro Kambe | Files touched by this commit (13) | Package updated
Log message:
www/ruby-rails52: update to 5.2.5

Real changes are in devel/ruby-activestorage52 only.

## Rails 5.2.5 (March 26, 2021) ##

*   Marcel is upgraded to version 1.0.0 to avoid a dependency on GPL-licensed
    mime types data.

    *George Claghorn*

*   The Poppler PDF previewer renders a preview image using the original
    document's crop box rather than its media box, hiding print margins. This
    matches the behavior of the MuPDF previewer.

    *Vincent Robert*
   2021-02-11 15:23:42 by Takahiro Kambe | Files touched by this commit (12) | Package updated
Log message:
www/rails52: update to 5.2.4.5

## Rails 5.2.4.5 (February 10, 2021) ##

*   Fix possible DoS vector in PostgreSQL money type

    Carefully crafted input can cause a DoS via the regular expressions used
    for validating the money format in the PostgreSQL adapter.  This patch
    fixes the regexp.

    Thanks to @dee-see from Hackerone for this patch!

    [CVE-2021-22880]

    *Aaron Patterson*
   2020-09-10 16:13:12 by Takahiro Kambe | Files touched by this commit (12) | Package updated
Log message:
www/ruby-rails52: update to  5.2.4.4

Update Ruby on Rails 52 to 5.2.4.4.

Security fix in ruby-actionview52.

## Rails 5.2.4.4 (September 09, 2020) ##

*   [CVE-2020-15169] Fix potential XSS vulnerability in the `translate`/`t` helper

    *Jonathan Hefner*
   2020-05-19 17:33:41 by Takahiro Kambe | Files touched by this commit (1) | Package updated
Log message:
devel/ruby-activesupport52: update to 5.2.4.3

Update ruby-activesupport52 to 5.2.4.3.

## Rails 5.2.4.3 (May 18, 2020) ##

*   [CVE-2020-8165] Deprecate Marshal.load on raw cache read in RedisCacheStore

*   [CVE-2020-8165] Avoid Marshal.load on raw cache value in MemCacheStore
   2020-03-20 16:37:38 by Takahiro Kambe | Files touched by this commit (2) | Package updated
Log message:
devel/ruby-activesupport52: update to 5.2.4.2

Update ruby-activesupport52 to 5.2.4.2.

## Rails 5.2.4.1 (December 18, 2019) ##

*   No changes.

## Rails 5.2.4 (November 27, 2019) ##

*   Make ActiveSupport::Logger Fiber-safe. Fixes #36752.

    Use `Fiber.current.__id__` in `ActiveSupport::Logger#local_level=` in order
    to make log level local to Ruby Fibers in addition to Threads.

    Example:

        logger = ActiveSupport::Logger.new(STDOUT)
        logger.level = 1
        p "Main is debug? #{logger.debug?}"

        Fiber.new {
          logger.local_level = 0
          p "Thread is debug? #{logger.debug?}"
        }.resume

        p "Main is debug? #{logger.debug?}"

    Before:

        Main is debug? false
        Thread is debug? true
        Main is debug? true

    After:

        Main is debug? false
        Thread is debug? true
        Main is debug? false

    *Alexander Varnin*
   2019-04-14 12:30:26 by Takahiro Kambe | Files touched by this commit (2) | Package updated
Log message:
devel/ruby-activesupport52: update to 5.2.3

## Rails 5.2.3 (March 27, 2019) ##

*   Add `ActiveSupport::HashWithIndifferentAccess#assoc`.

    `assoc` can now be called with either a string or a symbol.

    *Stefan Schüßler*

*   Fix `String#safe_constantize` throwing a `LoadError` for incorrectly cased \ 
constant references.

    *Keenan Brock*

*   Allow Range#=== and Range#cover? on Range

    `Range#cover?` can now accept a range argument like `Range#include?` and
    `Range#===`. `Range#===` works correctly on Ruby 2.6. `Range#include?` is moved
    into a new file, with these two methods.

    *utilum*

*   If the same block is `included` multiple times for a Concern, an exception \ 
is no longer raised.

    *Mark J. Titorenko*, *Vlad Bokov*

## Rails 5.2.2.1 (March 11, 2019) ##

*   No changes.
   2019-03-03 15:44:26 by Takahiro Kambe | Files touched by this commit (4)
Log message:
devel/ruby-activesupport52: add version 5.2.2 package

Add ruby-activesupport52 version 5.2.2 package.

A toolkit of support libraries and Ruby core extensions extracted from
the Rails framework. Rich support for multibyte strings,
internationalization, time zones, and testing.

This is for Ruby on Rails 5.2.

Next | Query returned 19 messages, browsing 11 to 20 | previous