Path to this page:
Subject: CVS commit: pkgsrc/www/ruby-actionpack32
From: Takahiro Kambe
Date: 2013-12-04 16:45:38
Message id: 20131204154538.9F3E696@cvs.netbsd.org
Log Message:
Update ruby-actionpack32 to 3.2.16, security update.
* Deep Munge the parameters for GET and POST Fixes CVE-2013-6417
* Stop using i18n's built in HTML error handling. Fixes: CVE-2013-4491
* Escape the unit value provided to number_to_currency Fixes CVE-2013-6415
* Only use valid mime type symbols as cache keys CVE-2013-6414
Files: