2013-02-17 09:55:13 by Takahiro Kambe | Files touched by this commit (4) | |
Log message:
Remove ruby-activesupport3.
It is part of Ruby on Rails 3.0 which isn't supported any more.
|
2013-01-29 16:37:52 by Takahiro Kambe | Files touched by this commit (2) |
Log message:
Update ruby-activesupport3 to 3.0.20.
Fix CVE-2013-0333.
There is a vulnerability in the JSON code for Ruby on Rails which
allows attackers to bypass authentication systems, inject arbitrary
SQL, inject and execute arbitrary code, or perform a DoS attack on a
Rails application.
## Rails 3.0.20 (unreleased)
* Fix XML serialization of methods that return nil to not be
considered as YAML (GH #8853 and GH #492)
|
2013-01-09 13:25:17 by Takahiro Kambe | Files touched by this commit (1) |
Log message:
Update ruby-activesupport3 to 3.0.19.
## Rails 3.0.19 (Jan 8, 2012) ##
* Hash.from_xml raises when it encounters type="symbol" or \
type="yaml".
Use Hash.from_trusted_xml to parse this XML.
CVE-2013-0156
*Jeremy Kemper*
|
2012-08-12 11:44:58 by Takahiro Kambe | Files touched by this commit (1) |
Log message:
Update ruby-activesupport3 to 3.0.17.
## Rails 3.0.17 (Aug 9, 2012)
* No changes.
|
2012-07-31 14:21:03 by Takahiro Kambe | Files touched by this commit (1) |
Log message:
Update ruby-activesupport3 to 3.0.16.
## Rails 3.0.16 (Jul 26, 2012)
* No changes.
## Rails 3.0.14 (Jun 12, 2012)
* No changes.
|
2012-06-14 16:47:52 by Takahiro Kambe | Files touched by this commit (2) |
Log message:
Update ruby-activesupport3 to 3.0.14.
pkgsrc change: add RUBY_RAILS_STRICT_DEP which will be enabled later.
## Rails 3.0.14 (Jun 12, 2012)
* No changes.
|
2012-06-02 03:27:07 by Takahiro Kambe | Files touched by this commit (1) |
Log message:
Update ruby-activesupport3 to 3.0.13.
* Rails 3.0.13 (May 31, 2012)
* Stop SafeBuffer#clone_empty from issuing warnings
|
2012-03-18 06:21:55 by Takahiro Kambe | Files touched by this commit (3) |
Log message:
Update ruby-activesupport3 to 3.0.12.
Merged CVE-2012-1099 fix.
|
2012-03-03 05:47:15 by Takahiro Kambe | Files touched by this commit (12) |
Log message:
Add fix for CVE-2012-1098 to:
devel/ruby-activesupport3
devel/ruby-activesupport31
www/ruby-actionpack3
www/ruby-actionpack31
And bump each PKGREVISION.
|
2011-12-13 16:53:37 by Takahiro Kambe | Files touched by this commit (1) |
Log message:
* Switch to use RUBY_RAILS_SUPPORTED.
* Don't hard code RUBY_RAILS2_VERSION in DISTNAME.
|