Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (4m)  pkgsrc-2024Q1 (6d)  pkgsrc-2023Q4 (53d)  pkgsrc-2023Q2 (85d)  pkgsrc-2023Q3 (164d) 

2024-05-23 16:46:47 UTC Now

2023-01-19 14:18:26 UTC MAIN commitmail json YAML

www/ruby-rack: update to 3.0.4.1

3.0.4 (2023-01-17)

* Rack::Request#POST should consistently raise errors.  Cache errors that
  occur when invoking Rack::Request#POST so they can be raised again later.
  (#2010, @ioquatix)

* Fix Rack::Lint error message for HTTP_CONTENT_TYPE and
  HTTP_CONTENT_LENGTH.  (#2007, @byroot)

* Extend Rack::MethodOverride to handle QueryParser::ParamsTooDeepError
  error.  (#2006, @byroot)

3.0.4.1 (2023-01-17)

* [CVE-2022-44571] Fix ReDoS vulnerability in multipart parser
* [CVE-2022-44570] Fix ReDoS in Rack::Utils.get_byte_ranges
* [CVE-2022-44572] Forbid control characters in attributes (also ReDoS)

(taca)