Path to this page:
Subject: CVS commit: pkgsrc/www/ruby-actionpack60
From: Takahiro Kambe
Date: 2020-05-19 19:12:50
Message id: 20200519171250.2DC9AFB27@cvs.NetBSD.org
Log Message:
www/ruby-actionpack60: update to 6.0.3.1
Update ruby-actionpack60 to 6.0.3.1.
## Rails 6.0.3.1 (May 18, 2020) ##
* [CVE-2020-8166] HMAC raw CSRF token before masking it, so it cannot be used \
to reconstruct a per-form token
* [CVE-2020-8164] Return self when calling #each, #each_pair, and #each_value \
instead of the raw @parameters hash
Files: