Object-relational mapping layer for Rails MVC Framework
activerecord_project:activerecord from the portA possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2.8.1 which could allow an attacker, that can manipulate data in the database (via means like SQL injection), the ability to escalate to an RCE.
A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in po…
pkg audit reports nothing for this version.CVE-2015-7576, CVE-2015-7577, CVE-2015-7581, CVE-2016-0751, CVE-2016-0752, CVE-2016-0753
databases/rubygem-activerecord4: Cosmetic change8ac9cc68e3
databases/rubygem-activerecord4: Add CPE informationd188b17a2f
databases/rubygem-activerecord4: Update WWW and clean up pkg-descra89611ae2e
Mk/**ruby.mk: Switch from USE_RUBY=yes to USES=ruby
Switch from Mk/bsd.ruby.mk to Mk/Uses/ruby.mk
Notable changes are.
- Mk/bsd.ruby.mk is moved to Mk/Uses/ruby.mk.
- USE_RUBY=yes is replaced with USES=ruby.
- USE_RUBY_EXTCONF is replaced with USES=ruby:extconf.
- USE_RUBY_RDOC is replaced with USES=ruby:rdoc.
- USE_RUBY_SETUP is replaces with USES=ruby:setup.
- RUBY_NO_BUILD_DEPENDS and RUBY_NO_RUN_DEPENDS are replaced with
USES=ruby:{build,none,run}.
- RUBY_REQUIRE isn't used anywhere, so removed.
- USES=gem now implies USES=ruby.
This is mainly the work of yasu@ at https://reviews.freebsd.org/D27863
I have just made some cosmetic changes and ran exp-run to test that the
tree is not in a BROKEN state.
Approved by: portmgr
Differential Revision: https://reviews.freebsd.org/D3792518c6e18276Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
databases: remove 'Created by' lines A big Thank You to the original contributors of these ports: * "Choe, Cheng-Dae" whitekid * "Mahdi Mokhtari <mokhi64@gmail.com>" * "Meikel Brandmeyer" <ocaml-sqlite3-port@kotka.de> * <hvo.pm@xs4all.nl> * <jsmith@resonatingmedia.com> * <ports@c0decafe.net> * Aaron Dalton <aaron@FreeBSD.org> * Adam Weinberger <adamw@FreeBSD.org> * Ade Lovett <ade@FreeBSD.org> * Akinori MUSHA aka knu <knu@idaemons.org> * Alan Snelson <Alan@Wave2.org> * Aldis Berjoza <graudeejs@gmail.com> * Alessando Sagratini <ale_sagra@hotmail.com> * Alex Dupre <ale@FreeBSD.org> * Alex Samorukov <samm@freebsd.org> * Alexander Logvinov <ports@logvinov,com> * Alexander Logvinov <ports@logvinov.com> * Alexander Nedotsukov <bland@FreeBSD.org> * Alexander Novitsky * Alexander Zhuravlev <zaa@zaa.pp.ru> * Alexey Degtyarev <alexey@renatasystems.org> * Alexey Dokuchaev <danfe@FreeBSD.org> * Anders Nordby <anders@fix.no> * Andrei Antoukh <niwi@niwi.be> * Andrew McNaughton <andrew@scoop.co.nz> * Andrew Pantyukhin <infofarmer@FreeBSD.org> * Andrey Kostenko <andrey@kostenko.name> * Andrey Simonenko * Andrey Zakhvatov * Anes Mukhametov <anes@anes.su> * Anton Berezin <tobez@FreeBSD.org> * Anton Berezin <tobez@tobez.org> * Antonio Carlos Venancio Junior (<antonio@inf.ufsc.br>) * Antonio Carlos Venancio Junior (<antonio@php.net>) * Autrijus Tang <autrijus@autrijus.org> * Babak Farrokhi <farrokhi@FreeBSD.org> * Bartek Rutkowski <r@robakdesign.com> * Bernard Spil <brnrd@FreeBSD.org> * Brent J. Nordquist <bjn@visi.com> * Cezary Morga <cm@therek.net> * Cheng-Lung Sung <clsung@FreeBSD.org> * Choe, Cheng-Dae * Chris D. Faulhaber <jedgar@FreeBSD.org> * Chris Larsen <darth@vader.dk> * Damian Gerow <dgerow@afflictions.org> * Daniel O'Connor * Daniel Wijnands <daniel@itxl.nl> * Dave Green <dg@fastmail.co.uk> * David Thiel <lx@FreeBSD.org> * Davíð Steinn Geirsson <david@isnic.is> * Denis Generalov <gd.workbox@gmail.com> * Denis Generalov <gd@rambler-co.ru> * Denis Shaposhnikov <dsh@bamus.cz> * Dermot Tynan <dtynan@kalopa.com> * Dmitry Liakh <dliakh@ukr.net> * Dmitry Sivachenko <demon@FreeBSD.org> * Dmitry Sivachenko <dima@Chg.RU> * Dmitry Sivachenko <mitya@yandex-team.ru> * Domas Mituzas <midom@dammit.lt> * Dominic Mitchell * Don Owens <don@regexguy.com> * Dryice Dong Liu <dryice@dryice.name> * Edwin Groothuis (edwin@mavetju.org) * Eric Freeman <freebsdports@chillibear.com> * Espen Tagestad <espen@tagestad.no> * Espen Volden aka voldern <voldern@hoeggen.net> * Evan Sarmiento <bsdports@wayfair.com> * Fernan Aguero <fernan@iib.unsam.edu.ar> * Frank Wall <fw@moov.de> * Ganbold Tsagaankhuu <ganbold@FreeBSD.org> * Gary Palmer <gpalmer@FreeBSD.org> * Gea-Suan Lin <gslin@gslin.org> * Geraud CONTINSOUZAS <geraud@gcu.info> * Gerrit Beine <tux@pinguru.net> * Greg Larkin <glarkin@FreeBSD.org> * Grzegorz Blach <gblach@FreeBSD.org> * Hansjoerg Pehofer <hansjoerg.pehofer@uibk.ac.at> * Henk van Oers <hvo.pm@xs4all.nl> * Henrik Hodne <henrik@hodne.io> * Hiroyuki Hanai <hanai@FreeBSD.org> * Horia Racoviceanu <horia@racoviceanu.com> * Hye-Shik Chang * Hye-Shik Chang <perky@python.or.kr> * Ilia Chipitsine <ilia@jane.cgu.chel.su> * Ivan Voras <ivoras@FreeBSD.org> * J.F. Dockes * Jaap Boender <jaapb@kerguelen.org> * Jake Smith <jake@xz.cx> * James FitzGibbon <jfitz@FreeBSD.org> * Janos Mohacsi <janos.mohacsi@bsd.hu> * Janos.Mohacsi@bsd.hu * Jason Helfman <jgh@FreeBSD.org> * Jens Rehsack <rehsack@liwing.de> * Jeremy Chadwick <koitsu@FreeBSD.org> * Jev Björsell <ports@ecadlabs.com> * Jim Ohlstein <jim@ohlste.in> * Jin-Shan Tseng <tjs@cdpa.nsysu.edu.tw> * Joe Horn <joehorn@gmail.com> * Joe Marcus Clarke <marcus@FreeBSD.org> * Johannes Meixner <johannes@perceivon.net> * John Chen <johnpupu@gmail.com> * John Marino <marino@FreeBSD.org> * John Merryweather Cooper * John Merryweather Cooper et al * Jon Nistor <nistor@snickers.org> * Jonathan Weiss (<jw@innerewut.de>) * Jose Jachuf <jjachuf@gmail.com> * Joshua D. Abraham <jabra@ccs.neu.edu> * Jov <amutu@amutu.com> * Jov amutu@amutu.com * Jui-Nan Lin <jnlin@freebsd.cs.nctu.edu.tw> * Julien Laffaye <kimelto@gmail.com> * Jyun-Yan You <jyyou@cs.nctu.edu.tw> * Keith Gaughan <k@sterechro.me> * Kevin Bowling <kbowling@freebsd.org> * Kimo <kimor79@yahoo.com> * Kimura Fuyuki <fuyuki@nigredo.org> * Koop Mast <kwm@FreeBSD.org> * Lars Balker Rasmussen <lbr@FreeBSD.org * Lars Balker Rasmussen <lbr@FreeBSD.org> * Lars Eggert <larse@isi.edu> * Lars Thegler <lars@thegler.dk> * Lars Thegler <lth@FreeBSD.org> * Li-Wen Hsu <lwhsu@FreeBSD.org> * Loïc BARTOLETTI * Loïc BARTOLETTI <lbartoletti@FreeBSD.org> * Lubomir Marinov <lubomir_m@abv.bg> * Mahdi Mokhtari <mokhi64@gmail.com> * Mahlon E. Smith <mahlon@martini.nu> * Marc G. Fournier <scrappy@FreeBSD.org> * Mark Felder <feld@FreeBSD.org> * Markus Brueffer <markus@FreeBSD.org> * Martin Matuska <martin@matuska.org> * Martin Matuska <mm@FreeBSD.org> * Martin Wilke <miwi@FreeBSD.org> * Mathieu Arnold <m@absolight.net> * Matthew Seaman * Matthias Andree <mandree@FreeBSD.org> * Matthias Fechner <mfechner@FreeBSD.org> * Matthias Petermann <matthias@petermann-it.de> * Max Khon * Max Khon <fjoe@FreeBSD.org> * Michael Johnson <ahze@FreeBSD.org> * Michael Johnson <ahze@ahze.net> * Michael Winking <mwfp@foldl.net> * Mikael URANKAR and Loïc BARTOLETTI * Mike Carlson (carlson39@llnl.gov) * Mikhail T. <michael@fun-box.ru> * Mikhail Teterin * Mikhail Teterin <mi@aldan.algebra.com> * Mikolaj Golub <trociny@FreeBSD.org> * Mirko Zinn <mail@derzinn.de> * Mohammad S. Babaei <info@babaei.net> * Muhammad Moinur Rahman <bofh@FreeBSD.org> * Nick Hibma <n_hibma@freebsd.org> * Nick Hilliard <nick@foobar.org> * Nick Sayer <nsayer@FreeBSD.org> * Nicola Vitale <nivit@FreeBSD.org> * Nicolas Embriz <nbari@tequila.io> * Nicolas de Bari Embriz <nbari@dalmp.com> * Oleg Sharoiko <os@rsu.ru> * Olexander Melnyk <olexander.v.melnyk@gmail.com> * Oliver Eikemeier <eikemeier@fillmore-labs.com> * Olivier Duchateau <duchateau.olivier@gmail.com> * Palle Girgensohn <girgen@FreeBSD.org> * Palle Girgensohn <girgen@partitur.se> * Palle Girgensohn <girgen@pingpong.net> * Parv <parv@pair.org> * Pete Fritchman <petef@databits.net> * Peter Avalos <pavalos@theshell.com> * Philip M. Gollucci * Philip M. Gollucci <philip@p6m7g8.com> * Philip Stoev <philip.stoev@galeracluster.com> * Pierre-Emmanuel Andre <pea@raveland.org> * Pietro Cerutti <gahr@FreeBSD.org> * Piotr Kubaj <pkubaj@anongoth.pl> * Po-Chuan Hsieh <sunpoet@FreeBSD.org> * Qing Feng <qingfeng@douban.com> * Quinton Dolan <q@onthenet.com.au> * Radim Kolar * Rainer Hurling <rhurlin@gwdg.de> * Rick Miller * Robert Kruus <rob.kruus@gmail.com> * Rod Taylor <ports@rbt.ca> * Roland van Laar <roland@micite.net> * Rong-En Fan <rafan@FreeBSD.org> * Roy Boerner * Rozhuk Ivan <rozhuk.im@gmail.com> * Rusty Nejdl * Ryan Steinmetz <rpsfa@rit.edu> * Ryan Steinmetz <zi@FreeBSD.org> * Ryan T. Dean <rtdean@cytherianage.net> * Sam Lawrance <boris@brooknet.com.au> * Scott McWhirter <scott@surreytech.co.uk> * Seamus Venasse <svenasse@polaris.ca> * Sean Chittenden <seanc@FreeBSD.org> * Sergei Kolobov <sergei@kolobov.com> * Sergei Vyshenski <svysh.fbsd@gmail.com> * Sergey A. Osokin <osa@FreeBSD.org.ru> * Sergey A. Osokin <osa@FreeBSD.org> * Sergey Matveychuk <sem@FreeBSD.org> * Sergey Skvortsov <skv@FreeBSD.org> * Sergey Skvortsov <skv@protey.ru> * Sevan Janiyan <venture37@geeklan.co.uk> * Sheldon Hearn <sheldonh@FreeBSD.org> * Stanislav Svirid <count@211.ru> * Stefan Schmidt <stefan.schmidt@stadtbuch.de> * Steve Wills <swills@FreeBSD.org> * Steve Wills <swills@freebsd.org> * Steven Kreuzer <skreuzer@FreeBSD.org> * Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org> * Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net> * T. William Wells <bill@twwells.com> * TAKATSU Tomonari <tota@FreeBSD.org> * Thierry Thomas (<thierry@pompo.net>) * Thomas Gellekum <tg@FreeBSD.org> * Timur I. Bakeyev <bat@cpan.org> * Tom Judge <tj@FreeBSD.org> * Torsten Zuehlsdorff <ports@toco-domains.de> * Torsten Zuhlsdorff <ports@toco-domains.de> * Toshiya Saitoh (<toshiya@saitoh.nu>) * Tsung-Han Yeh <snowfly@yuntech.edu.tw> * Vasil Dimov <vd@FreeBSD.org> * Veniamin Gvozdikov <vg@FreeBSD.org> * Vladimir Timofeev <vovkasm@gmail.com> * Wen Heping * Wen Heping <wen@FreeBSD.org> * Wen Heping <wenheping@gmail.com> * Wen heping <wenheping@gmail.com> * William Grzybowski <wg@FreeBSD.org> * Xin Li <delphij@FreeBSD.org> * Yarema <yds@CoolRat.org> * Yarema <yds@Necessitu.de> * Yen-Ming Lee <leeym@FreeBSD.org> * Ying-Chieh Liao <ijliao@FreeBSD.org> * Yoichi NAKAYAMA <yoichi@FreeBSD.org> * Yuri Victorovich <yuri@rawbw.com> * Zach Thompson <hideo@lastamericanempire.com> * Zach Thompson <lin-chi@lastamericanempire.com> * ache@FreeBSD.org * alfred * alp@sfedu.ru * andrew@scoop.co.nz * andrey@kostenko.name * chinsan * chinsan <chinsan.tw@gmail.com> * clive * clive@FreeBSD.org * clsung@dragon2.net * dcf@aracnet.com * elvstone@gmail.com * erikhb@bgnett.no * erwin@FreeBSD.org * gahr * ijliao * ijlioa * ivoras * johnpupu <johnpupu@gmail.com> * kirk@daycos.com * kuriyama * lbartoletti <lbartoletti@FreeBSD.org> * loïc bartoletti <lbartoletti@FreeBSD.org> * mharo@FreeBSD.org * michael johnson <ahze@ahze.net> * milki <milki@rescomp.berkeley.edy> * mm@FreeBSD.org * nbm * nectar@FreeBSD.org * nork@FreeBSD.org * nork@cityfujisawa.ne.jp * olevole@olevole.ru * proler@gmail.com * sergey@migsoft.com.ua * sobomax * spam@rm-rf.kiev.ua * stas * tobez * tremere@cainites.net * vanilla * vanilla@ * wen@FreeBSD.org * wenheping<wenheping@gmail.com> * wolman@cs.washington.edu * # Created by Kevin Bowling <kbowling@FreeBSD.org> * # Created by Matthias Fechner <mfechner@FreeBSD.org> With hat: portmgrd076ad94e2
rubygem-activerecord4: Update WWWf35cc338f4
Remove # $FreeBSD$ from Makefiles.305f148f48
Update to 4.2.11.3 Changes: https://github.com/rails/rails/releases184d312be4
Update version requirement of RUN_DEPENDS - Add PORTSCOUT - Update pkg-descr - Take maintainershipc9afce1e74
Update to 4.2.11.1 Changes: https://github.com/rails/rails/blob/4-2-stable/activerecord/CHANGELOG.mdcd2faca032
Update to 4.2.11 Changes: https://github.com/rails/rails/blob/4-2-stable/activerecord/CHANGELOG.md000e3659f3
Update WWW55bdf5fb39
Update to 4.2.10 Changes: https://github.com/rails/rails/blob/4-2-stable/activerecord/CHANGELOG.md5f1b8776a4
Update to 4.2.9 Changes: https://github.com/rails/rails/blob/4-2-stable/activerecord/CHANGELOG.mdd800d1d764
Update to 4.2.8 Changes: https://github.com/rails/rails/blob/4-2-stable/activerecord/CHANGELOG.md37cab25f40
Update WWW: http://www.rubyonrails.org/ redirects to http://rubyonrails.org/591d3689f0
Update Rails 4 from 4.2.6 to 4.2.7.1 Security: CVE-2016-6316 Security: CVE-2016-6317 Approved by: swills (mentor)4b2f32c726
Change all occurrences of xmj@chaot.net to johannes@perceivon.net as the owner requested. This only affects "Created by" lines with one exception: devel/uclcmd. There the maintainer is changed. This was overlooked in r416918. Approved by: junovitch (mentor)8b62234838
Convert USES=gem:autoplist to USES=gem since autoplist is default462519941e
create USES=gem and update rubygem- ports to use it Note that for now ports still have to have USE_RUBY=yes to use USES=gem PR: 209041 Differential Revision: https://reviews.freebsd.org/D6070b3e8fe8d85
Remove ${PORTSDIR}/ from dependencies, categories d, e, f, and g.
With hat: portmgr
Sponsored by: Absolight4e1b79a0a6- Update to 4.2.6 Changes: https://github.com/rails/rails/blob/4-2-stable/activerecord/CHANGELOG.md4907a60fcf
- Update to 4.2.5.2 Changes: https://github.com/rails/rails/blob/4-2-stable/activerecord/CHANGELOG.md https://github.com/rails/rails/compare/v4.2.5.1...v4.2.5.2 Security: 5a016dd0-8aa8-490e-a596-55f4cc17e4ef MFH: 2016Q12534a7a946
- Update to 4.2.5.1 Changes: https://github.com/rails/rails/blob/4-2-stable/activerecord/CHANGELOG.md https://github.com/rails/rails/compare/v4.2.5...v4.2.5.1 Security: bb0ef21d-0e1b-461b-bc3d-9cba39948888 MFH: 2016Q149cdbca366
- Update to 4.2.5 Changes: https://github.com/rails/rails/blob/4-2-stable/activerecord/CHANGELOG.md317befe073
- Add LICENSE_FILEf747400dfb
- Update to 4.2.4 Changes: https://github.com/rails/rails/blob/4-2-stable/activerecord/CHANGELOG.mdb5347f086d
- Update to 4.2.3 - Add NO_ARCH Changes: https://github.com/rails/rails/blob/4-2-stable/activerecord/CHANGELOG.md8e26320db0
- Update to 4.2.2 Changes: https://github.com/rails/rails/blob/4-2-stable/activerecord/CHANGELOG.md4c393934f6
www/rubygem-rails4: update to 4.2.1 Differential Revision: https://reviews.freebsd.org/D271083c258ba8a
www/rubygem-rails4: create port for rails4 This port required creating a number of new ports, old versions of existing ports and other adjustments, so do all that while here too. Rails is a web-application framework for the MVC pattern that includes both a template engine, controller framework, and object-relational mapping package. Everything needed to develop web-apps that can run on CGI, FastCGI, and mod_ruby Being a full-stack framework means that all layers are built to work seamlessly together. That way you Don't Repeat Yourself (DRY) and you can use a single language from top to bottom. Everything from templates to control flow to business logic is written in Ruby - The language of love for industry heavy-weights. WWW: http://www.rubyonrails.org Submitted by: xmj (based on)28071e6398