www/rubygem-actionpack70: Update to 7.0.10 Changes: https://github.com/rails/rails/releasesd211bbb0a4
Rails -- XSS vulnerabilitiesentered 2022-04-30
Port details
www/rubygem-actionpack70 7.0.10
Action Controller and Action View of Rails MVC Framework
Port info
- Maintainer
- sunpoet@FreeBSD.org
- Packages
- latest: 7.0.10
- Upstream
- up to date
- Last update
- to 7.0.10 · d211bbb0a4
- Quarterly
- 2026Q4: 7.0.10
- WWW
- https://github.com/rails/rails/tree/main/actionpack
- Links
- cgit · VuXML
Install
- Package
# pkg install rubygem-actionpack70installs 7.0.10 fromlatest; fromquarterly(2026Q4) 7.0.10- Port
# cd /usr/ports/www/rubygem-actionpack70 && make install clean- Size
- 197 KiB download · 846 KiB installed
- Depends on
- devel/ruby-gems 4.0.21, devel/rubygem-actionview70 7.0.10, devel/rubygem-activesupport70 7.0.10, devel/rubygem-racc 1.8.1, lang/ruby34 3.4.9_2,1, textproc/rubygem-rails-dom-testing-rails70 2.3.0, textproc/rubygem-rails-html-sanitizer 1.7.1, www/rubygem-rack-test 2.2.0, www/rubygem-rack22 2.2.24,3
- License
- MIT
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 7.0.10 | 7.0.10 | – |
| FreeBSD 15 | 7.0.10 | 7.0.10 | – |
| FreeBSD 14 | 7.0.10 | 7.0.10 | 7.0.10 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 7.0.10 | 7.0.10 | – |
| FreeBSD 14 | 7.0.10 | 7.0.10 | 7.0.10 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 7.0.10.Fixed (1)
Show 1 fixed
VuXML entries whose affected range the packaged version has left.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (26)
www/rubygem-actionpack70: Update to 7.0.8.7 Changes: https://github.com/rails/rails/releases Security: CVE-2024-541339b40aaa471
www/rubygem-actionpack70: Update to 7.0.8.6 Changes: https://github.com/rails/rails/releasesc52c6afb21
www/rubygem-actionpack70: Update to 7.0.8.5 Changes: https://github.com/rails/rails/releases Security: CVE-2024-41128, CVE-2024-47887c6b3da3d62
www/rubygem-actionpack70: Update to 7.0.8.4 Changes: https://github.com/rails/rails/releasesb69c97d384
www/rubygem-actionpack70: Update to 7.0.8.3 Changes: https://github.com/rails/rails/releases0a13d4b55e
www/rubygem-actionpack70: Update to 7.0.8.1 Changes: https://github.com/rails/rails/releases Security: CVE-2024-261433a5195e59e
www/rubygem-actionpack70: Update to 7.0.8 Changes: https://github.com/rails/rails/releasese0af8cc4b5
www/rubygem-actionpack70: Update to 7.0.7.2 Changes: https://github.com/rails/rails/releases7bca2e0f3a
www/rubygem-actionpack70: Update to 7.0.7 Changes: https://github.com/rails/rails/releases2661949329
www/rubygem-actionpack70: Update to 7.0.6 Changes: https://github.com/rails/rails/releases Security: CVE-2023-28362cdf1f139ba
www/rubygem-actionpack70: Update to 7.0.4.3 Changes: https://github.com/rails/rails/releases9c86d852dd
www/rubygem-actionpack70: Update to 7.0.4.2 Changes: https://github.com/rails/rails/releases Security: CVE-2023-22792, CVE-2023-22795, CVE-2023-227971779fdf0bf
Mk/**ruby.mk: Switch from USE_RUBY=yes to USES=ruby
Switch from Mk/bsd.ruby.mk to Mk/Uses/ruby.mk
Notable changes are.
- Mk/bsd.ruby.mk is moved to Mk/Uses/ruby.mk.
- USE_RUBY=yes is replaced with USES=ruby.
- USE_RUBY_EXTCONF is replaced with USES=ruby:extconf.
- USE_RUBY_RDOC is replaced with USES=ruby:rdoc.
- USE_RUBY_SETUP is replaces with USES=ruby:setup.
- RUBY_NO_BUILD_DEPENDS and RUBY_NO_RUN_DEPENDS are replaced with
USES=ruby:{build,none,run}.
- RUBY_REQUIRE isn't used anywhere, so removed.
- USES=gem now implies USES=ruby.
This is mainly the work of yasu@ at https://reviews.freebsd.org/D27863
I have just made some cosmetic changes and ran exp-run to test that the
tree is not in a BROKEN state.
Approved by: portmgr
Differential Revision: https://reviews.freebsd.org/D3792518c6e18276www/rubygem-actionpack70: Fix 04dc51723c3b2a3423988f38da85164767827d01 - Restore PORTREVISION5d8f161b89
www/rubygem-actionpack70: Update version requirement of RUN_DEPENDS - Update WWW and clean up pkg-descr04dc51723c
*/*: Update dependency For all ports that isn't compatible with rack 3.x, update dependency from www/rubygem-rack to www/rubygem-rack22. PR: 2680572672229436
Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
www/rubygem-actionpack70: Update to 7.0.3.1 Changes: https://github.com/rails/rails/releases68827ad4ee
www/rubygem-actionpack70: Update to 7.0.3 Changes: https://github.com/rails/rails/releasese3d83f32a5
www/rubygem-actionpack70: Update to 7.0.2.4 Changes: https://github.com/rails/rails/releases Security: CVE-2022-22577, CVE-2022-27777 Security: 9db93f3d-c725-11ec-9618-000d3ac475246f5649c389
www/rubygem-actionpack70: Update to 7.0.2.3 Changes: https://github.com/rails/rails/releases56f7c850fd
www/rubygem-actionpack70: Update to 7.0.2 Changes: https://github.com/rails/rails/releases040b15d440
www/rubygem-actionpack70: Update to 7.0.1 Changes: https://github.com/rails/rails/releases7bc65148ae
www/rubygem-actionpack70: Add rubygem-actionpack70 7.0.0 Action Pack is a framework for handling and responding to web requests. It provides mechanisms for routing (mapping request URLs to actions), defining controllers that implement actions, and generating responses. In short, Action Pack provides the controller layer in the MVC paradigm. It consists of several modules: - Action Dispatch, which parses information about the web request, handles routing as defined by the user, and does advanced processing related to HTTP such as MIME-type negotiation, decoding parameters in POST, PATCH, or PUT bodies, handling HTTP caching logic, cookies and sessions. - Action Controller, which provides a base controller class that can be subclassed to implement filters and actions to handle requests. The result of an action is typically content generated from views. With the Ruby on Rails framework, users only directly interface with the Action Controller module. Necessary Action Dispatch functionality is activated by default and Action View rendering is implicitly triggered by Action Controller. However, these modules are designed to function on their own and can be used outside of Rails. WWW: https://rubyonrails.org/ WWW: https://github.com/rails/rails/tree/main/actionpack74a830736d