a9f7375312
databases/ruby-activerecord60:
## Rails 6.0.3.5 (February 10, 2021) ##
* Fix possible DoS vector in PostgreSQL money type
Carefully crafted input can cause a DoS via the regular expressions used
for validating the money format in the PostgreSQL adapter. This patch
fixes the regexp.
Thanks to @dee-see from Hackerone for this patch!
[CVE-2021-22880]
*Aaron Patterson*
www/ruby-actionpack60
## Rails 6.0.3.5 (February 10, 2021) ##
* Prevent open redirect when allowed host starts with a dot
[CVE-2021-22881]
Thanks to @tktech (https://hackerone.com/tktech) for reporting this
issue and the patch!
*Aaron Patterson*
6 lines
404 B
Text
6 lines
404 B
Text
$NetBSD: distinfo,v 1.7 2021/02/11 14:30:07 taca Exp $
|
|
|
|
SHA1 (railties-6.0.3.5.gem) = 166e4943b8f9a44bd970fb5c0931f517a177e887
|
|
RMD160 (railties-6.0.3.5.gem) = c193c730aa7968aec01a5110e84ba7562a6509d1
|
|
SHA512 (railties-6.0.3.5.gem) = 11f4aa6783b8a92a28bca0df6b5b1ba7b258b23bee7ee09b0ae8672bd8d63686a600ccb6361614afa7b728da8e3e27b7abf5cc6ac9400d91d1d913b669c223af
|
|
Size (railties-6.0.3.5.gem) = 455168 bytes
|