1
0
2024-06-21 11:38:25 +00:00
committed by Git OBS Bridge
parent 37834d2bc7
commit aaf06b8598
4 changed files with 249 additions and 5 deletions

3
rails-7.0.8.4.gem Normal file
View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:7e418423a57ffde4466422f0afab676fbd8f23a7b47f5431fb38ab3dda9765eb
size 7168

View File

@@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:8e43af921acf766fb429126f020ec90c3b25809631f8fbdff95c3553828d5867
size 7168

View File

@@ -1,3 +1,247 @@
-------------------------------------------------------------------
Fri Jun 21 10:29:00 UTC 2024 - Dan Čermák <dan.cermak@posteo.net>
- 7.0.8.4:
## Active Support
* No changes.
## Active Model
* No changes.
## Active Record
* No changes.
## Action View
* No changes.
## Action Pack
* Include the HTTP Permissions-Policy on non-HTML Content-Types
[CVE-2024-28103]
## Active Job
* No changes.
## Action Mailer
* No changes.
## Action Cable
* No changes.
## Active Storage
* No changes.
## Action Mailbox
* No changes.
## Action Text
* No changes.
## Railties
* No changes.
7.0.8.2:
## Active Support
* No changes.
## Active Model
* No changes.
## Active Record
* No changes.
## Action View
* No changes.
## Action Pack
* No changes.
## Active Job
* No changes.
## Action Mailer
* No changes.
## Action Cable
* No changes.
## Active Storage
* No changes.
## Action Mailbox
* No changes.
## Action Text
* Upgrade Trix to 1.3.2 to fix [CVE-2024-34341](https://github.com/basecamp/trix/security/advisories/GHSA-qjqp-xr96-cj99).
*Rafael Mendonça França*
## Railties
* No changes.
7.0.8.1:
## Active Support
* No changes.
## Active Model
* No changes.
## Active Record
* No changes.
## Action View
* No changes.
## Action Pack
* Fix possible XSS vulnerability with the `translate` method in controllers
CVE-2024-26143
## Active Job
* No changes.
## Action Mailer
* No changes.
## Action Cable
* No changes.
## Active Storage
* Disables the session in `ActiveStorage::Blobs::ProxyController`
and `ActiveStorage::Representations::ProxyController`
in order to allow caching by default in some CDNs as CloudFlare
Fixes #44136
*Bruno Prieto*
## Action Mailbox
* No changes.
## Action Text
* No changes.
## Railties
* No changes.
-------------------------------------------------------------------
Tue Nov 14 15:27:29 UTC 2023 - Dan Čermák <dan.cermak@posteo.net>

View File

@@ -1,7 +1,7 @@
#
# spec file for package rubygem-rails-7.0
#
# Copyright (c) 2023 SUSE LLC
# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -24,7 +24,7 @@
#
Name: rubygem-rails-7.0
Version: 7.0.8
Version: 7.0.8.4
Release: 0
%define mod_name rails
%define mod_full_name %{mod_name}-%{version}