IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-25 18:55:32 -06:00
Code Issues Packages Projects Releases Wiki Activity

DEV: Upgrade Rails to 7.0.5.1 (#22305)

Browse Source 
See discuss.rubyonrails.org/t/cve-2023-28362-possible-xss-via-user-supplied-values-to/83132

Impact of this vulnerability has been assess to be very low for Discourse since XSS attacks are mitigated by Discourse's default CSP.
This commit is contained in:
Greg Molnar 2023-06-27 23:18:49 +00:00 committed by GitHub
parent 6c838c73e5
commit 4d3999de10
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 30 additions and 30 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Gemfile
View File

@ -18,7 +18,7 @@ else
# this allows us to include the bits of rails we use without pieces we do not. # this allows us to include the bits of rails we use without pieces we do not.
# #
# To issue a rails update bump the version number here # To issue a rails update bump the version number here
rails_version = "7.0.4.3" rails_version = "7.0.5.1"
gem "actionmailer", rails_version gem "actionmailer", rails_version
gem "actionpack", rails_version gem "actionpack", rails_version
gem "actionview", rails_version gem "actionview", rails_version

58
Gemfile.lock
View File

@ -10,25 +10,25 @@ GIT
GEM GEM
remote: https://rubygems.org/ remote: https://rubygems.org/
specs: specs:
actionmailer (7.0.4.3) actionmailer (7.0.5.1)
actionpack (= 7.0.4.3) actionpack (= 7.0.5.1)
actionview (= 7.0.4.3) actionview (= 7.0.5.1)
activejob (= 7.0.4.3) activejob (= 7.0.5.1)
activesupport (= 7.0.4.3) activesupport (= 7.0.5.1)
mail (~> 2.5, >= 2.5.4) mail (~> 2.5, >= 2.5.4)
net-imap net-imap
net-pop net-pop
net-smtp net-smtp
rails-dom-testing (~> 2.0) rails-dom-testing (~> 2.0)
actionpack (7.0.4.3) actionpack (7.0.5.1)
actionview (= 7.0.4.3) actionview (= 7.0.5.1)
activesupport (= 7.0.4.3) activesupport (= 7.0.5.1)
rack (~> 2.0, >= 2.2.0) rack (~> 2.0, >= 2.2.4)
rack-test (>= 0.6.3) rack-test (>= 0.6.3)
rails-dom-testing (~> 2.0) rails-dom-testing (~> 2.0)
rails-html-sanitizer (~> 1.0, >= 1.2.0) rails-html-sanitizer (~> 1.0, >= 1.2.0)
actionview (7.0.4.3) actionview (7.0.5.1)
activesupport (= 7.0.4.3) activesupport (= 7.0.5.1)
builder (~> 3.1) builder (~> 3.1)
erubi (~> 1.4) erubi (~> 1.4)
rails-dom-testing (~> 2.0) rails-dom-testing (~> 2.0)
@ -37,15 +37,15 @@ GEM
actionview (>= 6.0.a) actionview (>= 6.0.a)
active_model_serializers (0.8.4) active_model_serializers (0.8.4)
activemodel (>= 3.0) activemodel (>= 3.0)
activejob (7.0.4.3) activejob (7.0.5.1)
activesupport (= 7.0.4.3) activesupport (= 7.0.5.1)
globalid (>= 0.3.6) globalid (>= 0.3.6)
activemodel (7.0.4.3) activemodel (7.0.5.1)
activesupport (= 7.0.4.3) activesupport (= 7.0.5.1)
activerecord (7.0.4.3) activerecord (7.0.5.1)
activemodel (= 7.0.4.3) activemodel (= 7.0.5.1)
activesupport (= 7.0.4.3) activesupport (= 7.0.5.1)
activesupport (7.0.4.3) activesupport (7.0.5.1)
concurrent-ruby (~> 1.0, >= 1.0.2) concurrent-ruby (~> 1.0, >= 1.0.2)
i18n (>= 1.6, < 2) i18n (>= 1.6, < 2)
minitest (>= 5.1) minitest (>= 5.1)
@ -345,9 +345,9 @@ GEM
rails_multisite (5.0.0) rails_multisite (5.0.0)
activerecord (>= 6.0) activerecord (>= 6.0)
railties (>= 6.0) railties (>= 6.0)
railties (7.0.4.3) railties (7.0.5.1)
actionpack (= 7.0.4.3) actionpack (= 7.0.5.1)
activesupport (= 7.0.4.3) activesupport (= 7.0.5.1)
method_source method_source
rake (>= 12.2) rake (>= 12.2)
thor (~> 1.0) thor (~> 1.0)
@ -535,14 +535,14 @@ PLATFORMS
x86_64-linux x86_64-linux
DEPENDENCIES DEPENDENCIES
actionmailer (= 7.0.4.3) actionmailer (= 7.0.5.1)
actionpack (= 7.0.4.3) actionpack (= 7.0.5.1)
actionview (= 7.0.4.3) actionview (= 7.0.5.1)
actionview_precompiler actionview_precompiler
active_model_serializers (~> 0.8.3) active_model_serializers (~> 0.8.3)
activemodel (= 7.0.4.3) activemodel (= 7.0.5.1)
activerecord (= 7.0.4.3) activerecord (= 7.0.5.1)
activesupport (= 7.0.4.3) activesupport (= 7.0.5.1)
addressable addressable
annotate annotate
aws-sdk-s3 aws-sdk-s3
@ -629,7 +629,7 @@ DEPENDENCIES
rails-dom-testing rails-dom-testing
rails_failover rails_failover
rails_multisite rails_multisite
railties (= 7.0.4.3) railties (= 7.0.5.1)
rake rake
rb-fsevent rb-fsevent
rbtrace rbtrace