Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (31m)  pkgsrc-2024Q1 (6d)  pkgsrc-2023Q4 (53d)  pkgsrc-2023Q2 (85d)  pkgsrc-2023Q3 (165d) 

2024-05-23 21:05:11 UTC Now

2021-08-22 07:12:51 UTC MAIN commitmail json YAML

www/ruby-rails60: update to 6.0.4.1

Update Ruby on Rails 6.0 pacakges to 6.0.4.1.

Real changes are in Action Pack (www/ruby-actionpack60).

## Rails 6.0.4.1 (August 19, 2021) ##

* [CVE-2021-22942] Fix possible open redirect in Host Authorization middleware.

  Specially crafted "X-Forwarded-Host" headers in combination with certain
  "allowed host" formats can cause the Host Authorization middleware in Action
  Pack to redirect users to a malicious website.

(taca)