a9f7375312
databases/ruby-activerecord60:
## Rails 6.0.3.5 (February 10, 2021) ##
* Fix possible DoS vector in PostgreSQL money type
Carefully crafted input can cause a DoS via the regular expressions used
for validating the money format in the PostgreSQL adapter. This patch
fixes the regexp.
Thanks to @dee-see from Hackerone for this patch!
[CVE-2021-22880]
*Aaron Patterson*
www/ruby-actionpack60
## Rails 6.0.3.5 (February 10, 2021) ##
* Prevent open redirect when allowed host starts with a dot
[CVE-2021-22881]
Thanks to @tktech (https://hackerone.com/tktech) for reporting this
issue and the patch!
*Aaron Patterson*
6 lines
420 B
Text
6 lines
420 B
Text
$NetBSD: distinfo,v 1.7 2021/02/11 14:30:07 taca Exp $
|
|
|
|
SHA1 (activerecord-6.0.3.5.gem) = 2d2a15d89ace7afd9d29cd0072c788e244f19d86
|
|
RMD160 (activerecord-6.0.3.5.gem) = 1f9aadc7aa63a5aec92071a8e942ec4e55fcb2b4
|
|
SHA512 (activerecord-6.0.3.5.gem) = 7254c80ff9800dbcca643bf88a6c53b8a546167b139d49cea97e67d3037377d49ccbc32b916a823ce05a1264dc048f0d86b19a7afa2cf021e992fd0207a690cf
|
|
Size (activerecord-6.0.3.5.gem) = 407552 bytes
|