Path to this page:
Subject: CVS commit: [pkgsrc-2022Q1] pkgsrc/www/ruby-puma
From: Benny Siegert
Date: 2022-05-07 12:02:40
Message id: 20220507100240.997D3F994@cvs.NetBSD.org
Log Message:
Pullup ticket #6623 - requested by taca
www/ruby-puma: security fix
Revisions pulled up:
- www/ruby-puma/Makefile 1.33
- www/ruby-puma/distinfo 1.30
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Apr 24 14:43:10 UTC 2022
Modified Files:
pkgsrc/www/ruby-puma: Makefile distinfo
Log Message:
www/ruby-puma: update to 5.6.4
5.6.4 (2022-03-30)
Security
* Close several HTTP Request Smuggling exploits (CVE-2022-24790)
5.6.2 (2022-02-11)
Bugfix/Security
* Response body will always be closed. (GHSA-rmj8-8hhh-gv5h, related to #2809)
5.6.1 (2022-01-26)
Bugfixes
* Reverted a commit which appeared to be causing occasional blank header
values (#2809)
5.6.0 (2022-01-25)
Features
* Support localhost integration in ssl_bind (#2764, #2708)
* Allow backlog parameter to be set with ssl_bind DSL (#2780)
* Remove yaml (psych) requirement in StateFile (#2784)
* Allow culling of oldest workers, previously was only youngest (#2773,
#2794)
* Add worker_check_interval configuration option (#2759)
* Always send lowlevel_error response to client (#2731, #2341)
* Support for cert_pem and key_pem with ssl_bind DSL (#2728)
Bugfixes
* Keep thread names under 15 characters, prevents breakage on some OSes
(#2733)
* Fix two 'old-style-definition' compile warning (#2807, #2806)
* Log environment correctly using option value (#2799)
* Fix warning from Ruby master (will be 3.2.0) (#2785)
* extconf.rb - fix openssl with old Windows builds (#2757)
* server.rb - rescue handling (Errno::EBADF) for @notify.close (#2745)
Refactor
* server.rb - refactor code using @options[:remote_address] (#2742)
* [jruby] a couple refactorings - avoid copy-ing bytes (#2730)
Files: