Path to this page:
Subject: CVS commit: pkgsrc/www/ruby-rack2
From: Takahiro Kambe
Date: 2023-01-19 15:22:03
Message id: 20230119142203.9D06FFA90@cvs.NetBSD.org
Log Message:
www/ruby-rack2: update to 2.2.6.2
2.2.6 (2022-01-17)
* Extend Rack::MethodOverride to handle QueryParser::ParamsTooDeepError
error. (#2011, @byroot)
2.2.6.1 (2022-01-17)
* [CVE-2022-44571] Fix ReDoS vulnerability in multipart parser
* [CVE-2022-44570] Fix ReDoS in Rack::Utils.get_byte_ranges
* [CVE-2022-44572] Forbid control characters in attributes (also ReDoS)
2.2.6.2 (2022-01-17)
* [CVE-2022-44570] Fix ReDoS in Rack::Utils.get_byte_ranges
Files: