SECURITY: Bump Rails to 6.1.3.2 (#12963)

Includes fixes for

- CVE-2021-22902
- CVE-2021-22903
- CVE-2021-22904
- CVE-2021-22885

https://github.com/rails/rails/blob/v6.1.3.2/actionpack/CHANGELOG.md
This commit is contained in:
David Taylor 2021-05-06 12:41:45 +01:00 committed by GitHub
parent a6300a9863
commit c456e31d26
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 36 additions and 36 deletions

14
Gemfile
View File

@ -18,13 +18,13 @@ else
# this allows us to include the bits of rails we use without pieces we do not. # this allows us to include the bits of rails we use without pieces we do not.
# #
# To issue a rails update bump the version number here # To issue a rails update bump the version number here
gem 'actionmailer', '6.1.3.1' gem 'actionmailer', '6.1.3.2'
gem 'actionpack', '6.1.3.1' gem 'actionpack', '6.1.3.2'
gem 'actionview', '6.1.3.1' gem 'actionview', '6.1.3.2'
gem 'activemodel', '6.1.3.1' gem 'activemodel', '6.1.3.2'
gem 'activerecord', '6.1.3.1' gem 'activerecord', '6.1.3.2'
gem 'activesupport', '6.1.3.1' gem 'activesupport', '6.1.3.2'
gem 'railties', '6.1.3.1' gem 'railties', '6.1.3.2'
gem 'sprockets-rails' gem 'sprockets-rails'
end end

View File

@ -8,22 +8,22 @@ GIT
GEM GEM
remote: https://rubygems.org/ remote: https://rubygems.org/
specs: specs:
actionmailer (6.1.3.1) actionmailer (6.1.3.2)
actionpack (= 6.1.3.1) actionpack (= 6.1.3.2)
actionview (= 6.1.3.1) actionview (= 6.1.3.2)
activejob (= 6.1.3.1) activejob (= 6.1.3.2)
activesupport (= 6.1.3.1) activesupport (= 6.1.3.2)
mail (~> 2.5, >= 2.5.4) mail (~> 2.5, >= 2.5.4)
rails-dom-testing (~> 2.0) rails-dom-testing (~> 2.0)
actionpack (6.1.3.1) actionpack (6.1.3.2)
actionview (= 6.1.3.1) actionview (= 6.1.3.2)
activesupport (= 6.1.3.1) activesupport (= 6.1.3.2)
rack (~> 2.0, >= 2.0.9) rack (~> 2.0, >= 2.0.9)
rack-test (>= 0.6.3) rack-test (>= 0.6.3)
rails-dom-testing (~> 2.0) rails-dom-testing (~> 2.0)
rails-html-sanitizer (~> 1.0, >= 1.2.0) rails-html-sanitizer (~> 1.0, >= 1.2.0)
actionview (6.1.3.1) actionview (6.1.3.2)
activesupport (= 6.1.3.1) activesupport (= 6.1.3.2)
builder (~> 3.1) builder (~> 3.1)
erubi (~> 1.4) erubi (~> 1.4)
rails-dom-testing (~> 2.0) rails-dom-testing (~> 2.0)
@ -32,15 +32,15 @@ GEM
actionview (>= 6.0.a) actionview (>= 6.0.a)
active_model_serializers (0.8.4) active_model_serializers (0.8.4)
activemodel (>= 3.0) activemodel (>= 3.0)
activejob (6.1.3.1) activejob (6.1.3.2)
activesupport (= 6.1.3.1) activesupport (= 6.1.3.2)
globalid (>= 0.3.6) globalid (>= 0.3.6)
activemodel (6.1.3.1) activemodel (6.1.3.2)
activesupport (= 6.1.3.1) activesupport (= 6.1.3.2)
activerecord (6.1.3.1) activerecord (6.1.3.2)
activemodel (= 6.1.3.1) activemodel (= 6.1.3.2)
activesupport (= 6.1.3.1) activesupport (= 6.1.3.2)
activesupport (6.1.3.1) activesupport (6.1.3.2)
concurrent-ruby (~> 1.0, >= 1.0.2) concurrent-ruby (~> 1.0, >= 1.0.2)
i18n (>= 1.6, < 2) i18n (>= 1.6, < 2)
minitest (>= 5.1) minitest (>= 5.1)
@ -323,9 +323,9 @@ GEM
rails_multisite (3.0.0) rails_multisite (3.0.0)
activerecord (> 5.0, < 7) activerecord (> 5.0, < 7)
railties (> 5.0, < 7) railties (> 5.0, < 7)
railties (6.1.3.1) railties (6.1.3.2)
actionpack (= 6.1.3.1) actionpack (= 6.1.3.2)
activesupport (= 6.1.3.1) activesupport (= 6.1.3.2)
method_source method_source
rake (>= 0.8.7) rake (>= 0.8.7)
thor (~> 1.0) thor (~> 1.0)
@ -479,14 +479,14 @@ PLATFORMS
x86_64-linux x86_64-linux
DEPENDENCIES DEPENDENCIES
actionmailer (= 6.1.3.1) actionmailer (= 6.1.3.2)
actionpack (= 6.1.3.1) actionpack (= 6.1.3.2)
actionview (= 6.1.3.1) actionview (= 6.1.3.2)
actionview_precompiler actionview_precompiler
active_model_serializers (~> 0.8.3) active_model_serializers (~> 0.8.3)
activemodel (= 6.1.3.1) activemodel (= 6.1.3.2)
activerecord (= 6.1.3.1) activerecord (= 6.1.3.2)
activesupport (= 6.1.3.1) activesupport (= 6.1.3.2)
addressable addressable
annotate annotate
aws-sdk-s3 aws-sdk-s3
@ -566,7 +566,7 @@ DEPENDENCIES
rack-protection rack-protection
rails_failover rails_failover
rails_multisite rails_multisite
railties (= 6.1.3.1) railties (= 6.1.3.2)
rake rake
rb-fsevent rb-fsevent
rbtrace rbtrace
@ -606,4 +606,4 @@ DEPENDENCIES
yaml-lint yaml-lint
BUNDLED WITH BUNDLED WITH
2.2.7 2.2.16