pkgsrc-Changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

CVS commit: pkgsrc/devel/ruby-activemodel

Module Name:    pkgsrc
Committed By:   taca
Date:           Tue Jan 29 15:38:40 UTC 2013

Modified Files:
        pkgsrc/devel/ruby-activemodel: distinfo

Log Message:
Update ruby-activemodel to 3.0.20.

Fix CVE-2013-0333.

There is a vulnerability in the JSON  code for Ruby on Rails which
allows attackers to bypass authentication systems, inject arbitrary
SQL, inject and execute arbitrary code, or perform a DoS attack on a
Rails application.

## Rails 3.0.20 (unreleased)

* Fix XML serialization of methods that return nil to not be
  considered as YAML (GH #8853 and GH #492)

To generate a diff of this commit:
cvs rdiff -u -r1.17 -r1.18 pkgsrc/devel/ruby-activemodel/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Home | Main Index | Thread Index | Old Index