Navigation:
Browse pkgsrc
(this page) 2022-03-13 16:15:05 by Takahiro Kambe | Files touched by this commit (14) |  |
Log message: www/ruby-rails70: update to 7.0.2.3 Changes are in devel/ruby-activestorage70 only. Rails 7.0.2.3 (March 08, 2022) * Added image transformation validation via configurable allow-list. Variant now offers a configurable allow-list for transformation methods in addition to a configurable deny-list for arguments. [CVE-2022-21831] |
| 2022-03-13 16:11:52 by Takahiro Kambe | Files touched by this commit (14) | |
Log message: www/ruby-rails61: update to 6.1.4.7 Ruby on Rails 6.1.4.7 is not latest version but it should be easy to pull-up to pkgsrc-2021Q4. Changes are in devel/ruby-activestorage61 only. ## Rails 6.1.4.7 (March 08, 2022) ## * Added image transformation validation via configurable allow-list. Variant now offers a configurable allow-list for transformation methods in addition to a configurable deny-list for arguments. [CVE-2022-21831] |
| 2022-03-13 16:08:23 by Takahiro Kambe | Files touched by this commit (14) | |
Log message: www/ruby-rails60: update to 6.0.4.7 Changes are in devel/ruby-activestorage60 only. ## Rails 6.0.4.7 (March 08, 2022) ## * Added image transformation validation via configurable allow-list. Variant now offers a configurable allow-list for transformation methods in addition to a configurable deny-list for arguments. [CVE-2022-21831] |
| 2022-03-13 16:04:27 by Takahiro Kambe | Files touched by this commit (12) | |
Log message: www/ruby-rails52: update to 5.2.6.3 Ruby on Rails 5.2.6.3 is not latest version but it should be easy to pull-up to pkgsrc-2021Q4. Changes are in devel/ruby-activestorage52 only. Rails 5.2.6.3 (March 08, 2022) * Added image transformation validation via configurable allow-list. Variant now offers a configurable allow-list for transformation methods in addition to a configurable deny-list for arguments. [CVE-2022-21831] |
| 2022-02-23 16:53:25 by Jonathan Perkin | Files touched by this commit (1) |
Log message: ruby: Fix extension installs on non-NetBSD. For some reason NetBSD does not append an OS version like pretty much all other OS, and so installs of arch-specific extensions directories were broken due to the triple containing a dash before the version and causing PLIST failures. Introduce a new RUBY_EXTARCH variable that has a special-case for NetBSD, and use it for GEM_EXTSBASE. Fixes many packages, but notably ruby31-base. |
| 2022-02-20 16:59:09 by Takahiro Kambe | Files touched by this commit (5) | |
Log message: lang/ruby31-base: update to 3.1.1 From release announce: Ruby 3.1.1 Released Posted by naruse on 18 Feb 2022 Ruby 3.1.1 has been released. This is the first TEENY version release of the stable 3.1 series. See the commit logs <https://github.com/ruby/ruby/compare/v3_1_0...v3_1_1> \ for details. |
| 2022-02-13 08:39:14 by Takahiro Kambe | Files touched by this commit (1) | |
Log message: lang/ruby: start update of ruby-rails70 to 7.0.2.2 |
| 2022-02-13 08:35:06 by Takahiro Kambe | Files touched by this commit (14) | |
Log message: www/ruby-rails61: update to 6.1.4.6 This update contains security fix for CVE-2022-23633 in ruby-actionpack61. Active Support 6.1.4.6 (2022-02-11) * Fix Reloader method signature to work with the new Executor signature. Action Pack 6.1.4.5 (2022-02-11) * Under certain circumstances, the middleware isn't informed that the response body has been fully closed which result in request state not being fully reset before the next request. [CVE-2022-23633] Other packages have no change. |
| 2022-02-13 08:31:23 by Takahiro Kambe | Files touched by this commit (14) | |
Log message: www/ruby-rails60: update to 6.0.4.6 This update contains security fix for CVE-2022-23633 in ruby-actionpack60. Active Support 6.0.4.6 (2022-02-11) * Fix Reloader method signature to work with the new Executor signature. Action Pack 6.0.4.6 6.0.4.5 (2022-02-11) * Under certain circumstances, the middleware isn't informed that the response body has been fully closed which result in request state not being fully reset before the next request. [CVE-2022-23633] Other packages have no change. |
| 2022-02-13 08:26:07 by Takahiro Kambe | Files touched by this commit (12) | |
Log message: www/ruby-rails52: update to 5.2.6.2 This update contains security fix for CVE-2022-23633 in Active Support 5.2.6.2 (2022-02-11) * Fix Reloader method signature to work with the new Executor signature. Action Pack 5.2.6.2 (2022-02-11) * Under certain circumstances, the middleware isn't informed that the response body has been fully closed which result in request state not being fully reset before the next request. [CVE-2022-23633] |
New packages: