Path to this page:
Subject: CVS commit: [pkgsrc-2022Q4] pkgsrc
From: S.P.Zeidler
Date: 2023-03-04 14:58:17
Message id: 20230304135817.59D66FA90@cvs.NetBSD.org
Log Message:
Pullup ticket #6732 - requested by taca
databases/ruby-activerecord60: security update
devel/ruby-activejob60: distinfo update
devel/ruby-activemodel60: distinfo update
devel/ruby-activestorage60: distinfo update
devel/ruby-activesupport60: distinfo update
devel/ruby-railties60: distinfo update
mail/ruby-actionmailbox60: distinfo update
mail/ruby-actionmailer60: distinfo update
textproc/ruby-actiontext60: distinfo update
www/ruby-actioncable60: distinfo update
www/ruby-actionpack60: distinfo update
www/ruby-actionpack60: distinfo update
www/ruby-actionview60: distinfo update
www/ruby-rails60: distinfo update
Revisions pulled up:
- databases/ruby-activerecord60/distinfo 1.21
- devel/ruby-activejob60/distinfo 1.21
- devel/ruby-activemodel60/distinfo 1.21
- devel/ruby-activestorage60/distinfo 1.21
- devel/ruby-activesupport60/distinfo 1.21
- devel/ruby-railties60/distinfo 1.21
- lang/ruby/rails.mk 1.138
- mail/ruby-actionmailbox60/distinfo 1.21
- mail/ruby-actionmailer60/distinfo 1.21
- textproc/ruby-actiontext60/distinfo 1.21
- www/ruby-actioncable60/distinfo 1.21
- www/ruby-actionpack60/Makefile 1.5
- www/ruby-actionpack60/distinfo 1.21
- www/ruby-actionview60/distinfo 1.21
- www/ruby-rails60/distinfo 1.21
-------------------------------------------------------------------
Module Name: pkgsrc
Committed By: taca
Date: Thu Jan 19 14:27:26 UTC 2023
Modified Files:
pkgsrc/databases/ruby-activerecord60: distinfo
pkgsrc/devel/ruby-activejob60: distinfo
pkgsrc/devel/ruby-activemodel60: distinfo
pkgsrc/devel/ruby-activestorage60: distinfo
pkgsrc/devel/ruby-activesupport60: distinfo
pkgsrc/devel/ruby-railties60: distinfo
pkgsrc/lang/ruby: rails.mk
pkgsrc/mail/ruby-actionmailbox60: distinfo
pkgsrc/mail/ruby-actionmailer60: distinfo
pkgsrc/textproc/ruby-actiontext60: distinfo
pkgsrc/www/ruby-actioncable60: distinfo
pkgsrc/www/ruby-actionpack60: Makefile distinfo
pkgsrc/www/ruby-actionview60: distinfo
pkgsrc/www/ruby-rails60: distinfo
Log Message:
www/ruby-rails60: update to 6.0.6.1
Only databases/ruby-activerecord61 has updated.
Rails 6.0.6.1 (2023-01-17)
* Make `sanitize_as_sql_comment` more strict
Though this method was likely never meant to take user input, it was
attempting sanitization. That sanitization could be bypassed with
carefully crafted input.
This commit makes the sanitization more robust by replacing any
occurrances of "/*" or "*/" with "/ *" or \
"* /". It also performs a
first pass to remove one surrounding comment to avoid compatibility
issues for users relying on the existing removal.
This also clarifies in the documentation of annotate that it should not
be provided user input.
[CVE-2023-22794]
To generate a diff of this commit:
cvs rdiff -u -r1.20 -r1.21 pkgsrc/databases/ruby-activerecord60/distinfo
cvs rdiff -u -r1.20 -r1.21 pkgsrc/devel/ruby-activejob60/distinfo
cvs rdiff -u -r1.20 -r1.21 pkgsrc/devel/ruby-activemodel60/distinfo
cvs rdiff -u -r1.20 -r1.21 pkgsrc/devel/ruby-activestorage60/distinfo
cvs rdiff -u -r1.20 -r1.21 pkgsrc/devel/ruby-activesupport60/distinfo
cvs rdiff -u -r1.20 -r1.21 pkgsrc/devel/ruby-railties60/distinfo
cvs rdiff -u -r1.137 -r1.138 pkgsrc/lang/ruby/rails.mk
cvs rdiff -u -r1.20 -r1.21 pkgsrc/mail/ruby-actionmailbox60/distinfo
cvs rdiff -u -r1.20 -r1.21 pkgsrc/mail/ruby-actionmailer60/distinfo
cvs rdiff -u -r1.20 -r1.21 pkgsrc/textproc/ruby-actiontext60/distinfo
cvs rdiff -u -r1.20 -r1.21 pkgsrc/www/ruby-actioncable60/distinfo
cvs rdiff -u -r1.4 -r1.5 pkgsrc/www/ruby-actionpack60/Makefile
cvs rdiff -u -r1.20 -r1.21 pkgsrc/www/ruby-actionpack60/distinfo
cvs rdiff -u -r1.20 -r1.21 pkgsrc/www/ruby-actionview60/distinfo
cvs rdiff -u -r1.20 -r1.21 pkgsrc/www/ruby-rails60/distinfo
Files: