--- - branch: pkgsrc-2022Q2 date: Sat Jul 23 19:15:52 UTC 2022 files: - new: 1.18.2.1 old: '1.18' path: pkgsrc/databases/ruby-activerecord60/distinfo pathrev: pkgsrc/databases/ruby-activerecord60/distinfo@1.18.2.1 type: modified - new: 1.18.2.1 old: '1.18' path: pkgsrc/devel/ruby-activejob60/distinfo pathrev: pkgsrc/devel/ruby-activejob60/distinfo@1.18.2.1 type: modified - new: 1.18.2.1 old: '1.18' path: pkgsrc/devel/ruby-activemodel60/distinfo pathrev: pkgsrc/devel/ruby-activemodel60/distinfo@1.18.2.1 type: modified - new: 1.18.2.1 old: '1.18' path: pkgsrc/devel/ruby-activestorage60/distinfo pathrev: pkgsrc/devel/ruby-activestorage60/distinfo@1.18.2.1 type: modified - new: 1.18.2.1 old: '1.18' path: pkgsrc/devel/ruby-activesupport60/distinfo pathrev: pkgsrc/devel/ruby-activesupport60/distinfo@1.18.2.1 type: modified - new: 1.4.2.1 old: '1.4' path: pkgsrc/devel/ruby-railties60/Makefile pathrev: pkgsrc/devel/ruby-railties60/Makefile@1.4.2.1 type: modified - new: 1.18.2.1 old: '1.18' path: pkgsrc/devel/ruby-railties60/distinfo pathrev: pkgsrc/devel/ruby-railties60/distinfo@1.18.2.1 type: modified - new: 1.128.2.2 old: 1.128.2.1 path: pkgsrc/lang/ruby/rails.mk pathrev: pkgsrc/lang/ruby/rails.mk@1.128.2.2 type: modified - new: 1.18.2.1 old: '1.18' path: pkgsrc/mail/ruby-actionmailbox60/distinfo pathrev: pkgsrc/mail/ruby-actionmailbox60/distinfo@1.18.2.1 type: modified - new: 1.18.2.1 old: '1.18' path: pkgsrc/mail/ruby-actionmailer60/distinfo pathrev: pkgsrc/mail/ruby-actionmailer60/distinfo@1.18.2.1 type: modified - new: 1.18.2.1 old: '1.18' path: pkgsrc/textproc/ruby-actiontext60/distinfo pathrev: pkgsrc/textproc/ruby-actiontext60/distinfo@1.18.2.1 type: modified - new: 1.18.2.1 old: '1.18' path: pkgsrc/www/ruby-actioncable60/distinfo pathrev: pkgsrc/www/ruby-actioncable60/distinfo@1.18.2.1 type: modified - new: 1.18.2.1 old: '1.18' path: pkgsrc/www/ruby-actionpack60/distinfo pathrev: pkgsrc/www/ruby-actionpack60/distinfo@1.18.2.1 type: modified - new: 1.18.2.1 old: '1.18' path: pkgsrc/www/ruby-actionview60/distinfo pathrev: pkgsrc/www/ruby-actionview60/distinfo@1.18.2.1 type: modified - new: 1.18.2.1 old: '1.18' path: pkgsrc/www/ruby-rails60/distinfo pathrev: pkgsrc/www/ruby-rails60/distinfo@1.18.2.1 type: modified id: 20220723T191552Z.17101543ca132935d6ac6653667ef57e610f5d7a log: "Pullup ticket #6654 - requested by taca\ndatabases/ruby-activerecord60: security update\ndevel/ruby-activejob60: security update\ndevel/ruby-activemodel60: security update\ndevel/ruby-activestorage60: security update\ndevel/ruby-activesupport60: security update\ndevel/ruby-railties60: security update\nmail/ruby-actionmailbox60: security update\nmail/ruby-actionmailer60: security update\ntextproc/ruby-actiontext60: security update\nwww/ruby-actioncable60: security update\nwww/ruby-actionpack60: security update\nwww/ruby-actionview60: security update\nwww/ruby-rails60: security update\n\nRevisions pulled up:\n- databases/ruby-activerecord60/distinfo 1.19\n- devel/ruby-activejob60/distinfo 1.19\n- devel/ruby-activemodel60/distinfo \ 1.19\n- devel/ruby-activestorage60/distinfo 1.19\n- devel/ruby-activesupport60/distinfo 1.19\n- devel/ruby-railties60/Makefile \ 1.5\n- devel/ruby-railties60/distinfo 1.19\n- lang/ruby/rails.mk 1.130\n- mail/ruby-actionmailbox60/distinfo \ 1.19\n- mail/ruby-actionmailer60/distinfo 1.19\n- textproc/ruby-actiontext60/distinfo 1.19\n- www/ruby-actioncable60/distinfo \ 1.19\n- www/ruby-actionpack60/distinfo 1.19\n- www/ruby-actionview60/distinfo 1.19\n- www/ruby-rails60/distinfo \ 1.19\n\n-------------------------------------------------------------------\n \ Module Name:\tpkgsrc\n Committed By:\ttaca\n Date:\t\tWed Jul 13 14:44:10 UTC 2022\n\n Modified Files:\n \tpkgsrc/databases/ruby-activerecord60: distinfo\n \ \tpkgsrc/devel/ruby-activejob60: distinfo\n \tpkgsrc/devel/ruby-activemodel60: distinfo\n \tpkgsrc/devel/ruby-activestorage60: distinfo\n \tpkgsrc/devel/ruby-activesupport60: distinfo\n \tpkgsrc/devel/ruby-railties60: Makefile distinfo\n \tpkgsrc/lang/ruby: rails.mk\n \tpkgsrc/mail/ruby-actionmailbox60: distinfo\n \tpkgsrc/mail/ruby-actionmailer60: distinfo\n \tpkgsrc/textproc/ruby-actiontext60: distinfo\n \tpkgsrc/www/ruby-actioncable60: distinfo\n \tpkgsrc/www/ruby-actionpack60: distinfo\n \tpkgsrc/www/ruby-actionview60: distinfo\n \tpkgsrc/www/ruby-rails60: distinfo\n\n Log Message:\n www/ruby-rails60: update to 6.0.5.1\n\n Rails 6.0.5.1 (2022-07-12) updates databases/ruby-activerecord60 only.\n\n databases/ruby-activerecord60\n\n * Change ActiveRecord::Coders::YAMLColumn default to safe_load\n\n This adds two new configuration options The configuration options are as\n follows:\n\n \to config.active_storage.use_yaml_unsafe_load\n\n \ When set to true, this configuration option tells Rails to use the old\n \ \"unsafe\" YAML loading strategy, maintaining the existing behavior but\n \ leaving the possible escalation vulnerability in place. Setting this\n option to true is *not* recommended, but can aid in upgrading.\n\n \to config.active_record.yaml_column_permitted_classes\n\n \ The \"safe YAML\" loading method does not allow all classes to be\n deserialized by default. This option allows you to specify classes deemed\n \"safe\" in your application. For example, if your application uses Symbol\n and Time in serialized data, you can add Symbol and Time to the allowed\n list as follows:\n\n \ \tconfig.active_record.yaml_column_permitted_classes = [Symbol, Date, Time]\n\n \ [CVE-2022-32224]\n\n To generate a diff of this commit:\n cvs rdiff -u -r1.18 -r1.19 pkgsrc/databases/ruby-activerecord60/distinfo\n cvs rdiff -u -r1.18 -r1.19 pkgsrc/devel/ruby-activejob60/distinfo\n cvs rdiff -u -r1.18 -r1.19 pkgsrc/devel/ruby-activemodel60/distinfo\n \ cvs rdiff -u -r1.18 -r1.19 pkgsrc/devel/ruby-activestorage60/distinfo\n cvs rdiff -u -r1.18 -r1.19 pkgsrc/devel/ruby-activesupport60/distinfo\n cvs rdiff -u -r1.4 -r1.5 pkgsrc/devel/ruby-railties60/Makefile\n cvs rdiff -u -r1.18 -r1.19 pkgsrc/devel/ruby-railties60/distinfo\n cvs rdiff -u -r1.129 -r1.130 pkgsrc/lang/ruby/rails.mk\n \ cvs rdiff -u -r1.18 -r1.19 pkgsrc/mail/ruby-actionmailbox60/distinfo\n cvs rdiff -u -r1.18 -r1.19 pkgsrc/mail/ruby-actionmailer60/distinfo\n cvs rdiff -u -r1.18 -r1.19 pkgsrc/textproc/ruby-actiontext60/distinfo\n cvs rdiff -u -r1.18 -r1.19 pkgsrc/www/ruby-actioncable60/distinfo\n cvs rdiff -u -r1.18 -r1.19 pkgsrc/www/ruby-actionpack60/distinfo\n \ cvs rdiff -u -r1.18 -r1.19 pkgsrc/www/ruby-actionview60/distinfo\n cvs rdiff -u -r1.18 -r1.19 pkgsrc/www/ruby-rails60/distinfo\n" module: pkgsrc subject: 'CVS commit: [pkgsrc-2022Q2] pkgsrc' unixtime: '1658603752' user: spz