Path to this page:
Subject: CVS commit: [pkgsrc-2021Q3] pkgsrc/devel/ruby-redmine42
From: Thomas Merkel
Date: 2021-11-23 23:31:45
Message id: 20211123223145.D30F9FAEC@cvs.NetBSD.org
Log Message:
Pullup ticket #6539 - requested by taca
devel/ruby-redmine42: security fix
Revisions pulled up:
- devel/ruby-redmine42/Makefile 1.3
- devel/ruby-redmine42/distinfo 1.5
---
Module Name: pkgsrc
Committed By: taca
Date: Mon Nov 8 15:04:57 UTC 2021
Modified Files:
pkgsrc/devel/ruby-redmine42: Makefile distinfo
Log Message:
devel/ruby-redmine42: update to 4.2.3
This release includes a fix for a moderate severity issue found in all
recent releases.
4.2.3 (2021-10-10)
[Administration]
* Defect #35731: Password and Confirmation fields are marked as required
when editing a user
[Attachments]
* Defect #35642: Long text custom field values are not aligned with their
labels
* Defect #35715: File upload fails when run with uWSGI
[Issues]
* Defect #35655: Create duplicated follows relations fails with 500 internal
error
[Issues planning]
* Defect #35669: Prints of Issues Report details are messed-up due to the
size of the graphs
[Permissions and roles]
* Defect #35634: Attachments deletable even though issue edit not permitted
[Projects]
* Defect #35827: Deleting a closed or archived project returns 403
[Roadmap]
* Feature #35758: Add some space around the versions on the Roadmap
[Security]
* Defect #35789: Redmine is leaking usernames on activities index view
* Patch #35463: Enforce stricter class filtering in WatchersController
[Translations]
* Patch #35662: Mongolian translation update for "Notes", \
"Totals", and "%
Done"
* Patch #35766: Galician translation update for 4.2-stable
[UI]
* Defect #34834: Line breaks in the description of a custom field are
ignored in a tooltip
Files: