9b89b9d325
## Rails 5.2.4.5 (February 10, 2021) ##
* Fix possible DoS vector in PostgreSQL money type
Carefully crafted input can cause a DoS via the regular expressions used
for validating the money format in the PostgreSQL adapter. This patch
fixes the regexp.
Thanks to @dee-see from Hackerone for this patch!
[CVE-2021-22880]
*Aaron Patterson*
6 lines
420 B
Text
6 lines
420 B
Text
$NetBSD: distinfo,v 1.6 2021/02/11 14:23:42 taca Exp $
|
|
|
|
SHA1 (activerecord-5.2.4.5.gem) = ea17aa9eade39356483c21d487f500e47f5f5dba
|
|
RMD160 (activerecord-5.2.4.5.gem) = 17d3081c0011ef5bfc0417274d6f9e13a9d39752
|
|
SHA512 (activerecord-5.2.4.5.gem) = ee83e247cbfabc8893dcaf507681e5722440fe1c2f549db1df91bbc74f6f7181b4ff654b4df4218e7f5ae6cfe186a308dc6bca18eabb398399e4d87073765147
|
|
Size (activerecord-5.2.4.5.gem) = 358400 bytes
|