--- - branch: pkgsrc-2020Q1 date: Mon Jun 1 19:15:23 UTC 2020 files: - new: 1.3.2.1 old: '1.3' path: pkgsrc/databases/ruby-activerecord52/distinfo pathrev: pkgsrc/databases/ruby-activerecord52/distinfo@1.3.2.1 type: modified - new: 1.3.2.1 old: '1.3' path: pkgsrc/devel/ruby-activejob52/distinfo pathrev: pkgsrc/devel/ruby-activejob52/distinfo@1.3.2.1 type: modified - new: 1.3.2.1 old: '1.3' path: pkgsrc/devel/ruby-activemodel52/distinfo pathrev: pkgsrc/devel/ruby-activemodel52/distinfo@1.3.2.1 type: modified - new: 1.3.2.1 old: '1.3' path: pkgsrc/devel/ruby-activestorage52/distinfo pathrev: pkgsrc/devel/ruby-activestorage52/distinfo@1.3.2.1 type: modified - new: 1.3.2.1 old: '1.3' path: pkgsrc/devel/ruby-activesupport52/distinfo pathrev: pkgsrc/devel/ruby-activesupport52/distinfo@1.3.2.1 type: modified - new: 1.3.2.1 old: '1.3' path: pkgsrc/devel/ruby-railties52/distinfo pathrev: pkgsrc/devel/ruby-railties52/distinfo@1.3.2.1 type: modified - new: 1.83.2.1 old: '1.83' path: pkgsrc/lang/ruby/rails.mk pathrev: pkgsrc/lang/ruby/rails.mk@1.83.2.1 type: modified - new: 1.3.2.1 old: '1.3' path: pkgsrc/mail/ruby-actionmailer52/distinfo pathrev: pkgsrc/mail/ruby-actionmailer52/distinfo@1.3.2.1 type: modified - new: 1.3.2.1 old: '1.3' path: pkgsrc/www/ruby-actioncable52/distinfo pathrev: pkgsrc/www/ruby-actioncable52/distinfo@1.3.2.1 type: modified - new: 1.3.2.1 old: '1.3' path: pkgsrc/www/ruby-actionpack52/distinfo pathrev: pkgsrc/www/ruby-actionpack52/distinfo@1.3.2.1 type: modified - new: 1.3.2.1 old: '1.3' path: pkgsrc/www/ruby-actionview52/distinfo pathrev: pkgsrc/www/ruby-actionview52/distinfo@1.3.2.1 type: modified - new: 1.3.2.1 old: '1.3' path: pkgsrc/www/ruby-rails52/distinfo pathrev: pkgsrc/www/ruby-rails52/distinfo@1.3.2.1 type: modified id: 20200601T191523Z.5e31cdf0e372c49827c5c83ecf2afeefe4745e22 log: "Pullup ticket #6213 - requested by taca\nwww/ruby-rails52: security fix\n\nRevisions pulled up:\n- lang/ruby/rails.mk patch\n- databases/ruby-activerecord52/distinfo 1.4\n- devel/ruby-activejob52/distinfo \ 1.4\n- devel/ruby-activemodel52/distinfo 1.4\n- devel/ruby-activestorage52/distinfo 1.4\n- devel/ruby-activesupport52/distinfo \ 1.4\n- devel/ruby-railties52/distinfo 1.4\n- mail/ruby-actionmailer52/distinfo 1.4\n- www/ruby-actioncable52/distinfo \ 1.4\n- www/ruby-actionpack52/distinfo 1.4\n- www/ruby-actionview52/distinfo 1.4\n- www/ruby-rails52/distinfo \ 1.4\n\n---\n Module Name:\tpkgsrc\n Committed By:\ttaca\n Date:\t\tTue May 19 15:33:41 UTC 2020\n\n Modified Files:\n \tpkgsrc/devel/ruby-activesupport52: distinfo\n\n Log Message:\n devel/ruby-activesupport52: update to 5.2.4.3\n\n \ Update ruby-activesupport52 to 5.2.4.3.\n\n ## Rails 5.2.4.3 (May 18, 2020) ##\n\n * [CVE-2020-8165] Deprecate Marshal.load on raw cache read in RedisCacheStore\n\n \ * [CVE-2020-8165] Avoid Marshal.load on raw cache value in MemCacheStore\n\n---\n \ Module Name:\tpkgsrc\n Committed By:\ttaca\n Date:\t\tTue May 19 15:34:47 UTC 2020\n\n Modified Files:\n \tpkgsrc/devel/ruby-activemodel52: distinfo\n\n \ Log Message:\n devel/ruby-activemodel52: update to 5.2.4.3\n\n Update ruby-activemodel52 to 5.2.4.3.\n\n ## Rails 5.2.4.3 (May 18, 2020) ##\n\n * No changes.\n\n---\n \ Module Name:\tpkgsrc\n Committed By:\ttaca\n Date:\t\tTue May 19 15:35:30 UTC 2020\n\n Modified Files:\n \tpkgsrc/devel/ruby-activejob52: distinfo\n\n \ Log Message:\n devel/ruby-activejob52: update to 5.2.4.3\n\n Update ruby-activejob52 to 5.2.4.3.\n\n ## Rails 5.2.4.3 (May 18, 2020) ##\n\n * No changes.\n\n---\n \ Module Name:\tpkgsrc\n Committed By:\ttaca\n Date:\t\tTue May 19 15:36:18 UTC 2020\n\n Modified Files:\n \tpkgsrc/www/ruby-actionview52: distinfo\n\n \ Log Message:\n www/ruby-actionview52: update to 5.2.4.3\n\n Update ruby-actionview52 to 5.2.4.3.\n\n ## Rails 5.2.4.3 (May 18, 2020) ##\n\n * [CVE-2020-8167] Check that request is same-origin prior to including CSRF token in XHRs\n\n---\n \ Module Name:\tpkgsrc\n Committed By:\ttaca\n Date:\t\tTue May 19 15:36:58 UTC 2020\n\n Modified Files:\n \tpkgsrc/www/ruby-actionpack52: distinfo\n\n \ Log Message:\n www/ruby-actionpack52: update to 5.2.4.3\n\n Update ruby-actionpack52 to 5.2.4.3.\n\n ## Rails 5.2.4.3 (May 18, 2020) ##\n\n * [CVE-2020-8166] HMAC raw CSRF token before masking it, so it cannot be used to reconstruct a per-form token\n\n * [CVE-2020-8164] Return self when calling #each, #each_pair, and #each_value instead of the raw @parameters hash\n\n---\n Module Name:\tpkgsrc\n \ Committed By:\ttaca\n Date:\t\tTue May 19 15:37:46 UTC 2020\n\n Modified Files:\n \tpkgsrc/www/ruby-actioncable52: distinfo\n\n Log Message:\n www/ruby-actioncable52: update to 5.2.4.3\n\n Update ruby-actioncable52 to 5.2.4.3.\n\n ## Rails 5.2.4.3 (May 18, 2020) ##\n\n * No changes.\n\n---\n Module Name:\tpkgsrc\n Committed By:\ttaca\n Date:\t\tTue May 19 15:38:35 UTC 2020\n\n Modified Files:\n \tpkgsrc/databases/ruby-activerecord52: distinfo\n\n Log Message:\n databases/ruby-activerecord52: update to 5.2.4.3\n\n \ Update ruby-activerecord52 to 5.2.4.3.\n\n ## Rails 5.2.4.3 (May 18, 2020) ##\n\n * No changes.\n\n---\n Module Name:\tpkgsrc\n Committed By:\ttaca\n \ Date:\t\tTue May 19 15:39:12 UTC 2020\n\n Modified Files:\n \tpkgsrc/devel/ruby-activestorage52: distinfo\n\n Log Message:\n devel/ruby-activestorage52: update to 5.2.4.3\n\n \ Update ruby-activestorage52 to 5.2.4.3.\n\n ## Rails 5.2.4.3 (May 18, 2020) ##\n\n * [CVE-2020-8162] Include Content-Length in signature for ActiveStorage direct upload\n\n---\n Module Name:\tpkgsrc\n Committed By:\ttaca\n Date:\t\tTue May 19 15:39:54 UTC 2020\n\n Modified Files:\n \tpkgsrc/mail/ruby-actionmailer52: distinfo\n\n Log Message:\n mail/ruby-actionmailer52: update to 5.2.4.3\n\n \ Update ruby-actionmailer52 to 5.2.4.3.\n\n ## Rails 5.2.4.3 (May 18, 2020) ##\n\n * No changes.\n\n---\n Module Name:\tpkgsrc\n Committed By:\ttaca\n \ Date:\t\tTue May 19 15:40:32 UTC 2020\n\n Modified Files:\n \tpkgsrc/devel/ruby-railties52: distinfo\n\n Log Message:\n devel/ruby-railties52: update to 5.2.4.3\n\n Update ruby-railties52 to 5.2.4.3.\n\n ## Rails 5.2.4.3 (May 18, 2020) ##\n\n * No changes.\n\n---\n Module Name:\tpkgsrc\n Committed By:\ttaca\n Date:\t\tTue May 19 15:41:07 UTC 2020\n\n Modified Files:\n \tpkgsrc/www/ruby-rails52: distinfo\n\n Log Message:\n www/ruby-rails52: update to 5.2.4.3\n\n Finally, update ruby-rails52 to 5.2.4.3.\n" module: pkgsrc subject: 'CVS commit: [pkgsrc-2020Q1] pkgsrc' unixtime: '1591038923' user: bsiegert