www/rubygem-rails*: Fix deprecated CPE_PRODUCT66d433f693
Port details
www/rubygem-rails70 7.0.10
Full-stack web application framework
Port info
- Maintainer
- sunpoet@FreeBSD.org
- Packages
- latest: 7.0.10
- Upstream
- up to date
- Last update
- to 7.0.10 · 66d433f693
- Quarterly
- 2026Q4: 7.0.10
- WWW
- https://rubyonrails.org/
- Links
- cgit · VuXML
Install
- Package
# pkg install rubygem-rails70installs 7.0.10 fromlatest; fromquarterly(2026Q4) 7.0.10- Port
# cd /usr/ports/www/rubygem-rails70 && make install clean- Size
- 5.3 KiB download · 9.3 KiB installed
- Depends on
- databases/rubygem-activemodel70 7.0.10, databases/rubygem-activerecord70 7.0.10, databases/rubygem-dalli 5.1.0, databases/rubygem-redis-namespace 1.11.0, databases/rubygem-sqlite3 2.9.6, devel/ruby-gems 4.0.21, devel/rubygem-actionview70 7.0.10, devel/rubygem-activejob70 7.0.10, devel/rubygem-activesupport70 7.0.10, devel/rubygem-bootsnap 1.26.0, devel/rubygem-capybara 3.40.0, devel/rubygem-json 3.0.2, devel/rubygem-listen 3.10.0, devel/rubygem-minitest 5.27.0, devel/rubygem-que 2.4.1, devel/rubygem-rake 13.4.2, devel/rubygem-readline-ext 0.2.0, devel/rubygem-sprockets-rails-rails70 3.5.2, devel/rubygem-sucker_punch 3.3.0, graphics/rubygem-image_processing 1.14.0_1, lang/ruby34 3.4.9_2,1, mail/rubygem-actionmailbox70 7.0.10, mail/rubygem-actionmailer70 7.0.10, net/rubygem-activestorage70 7.0.10_1, net/rubygem-connection_pool 3.0.2, sysutils/rubygem-bundler 4.0.21,1, textproc/rubygem-actiontext70 7.0.10, textproc/rubygem-libxml-ruby 6.0.0, textproc/rubygem-nokogiri 1.19.4, textproc/rubygem-rexml 3.4.4, www/rubygem-actioncable70 7.0.10, www/rubygem-actionpack70 7.0.10, www/rubygem-cssbundling-rails-rails70 1.4.3, www/rubygem-importmap-rails-rails70 2.2.3, www/rubygem-jsbundling-rails-rails70 1.3.1, www/rubygem-propshaft-rails70 1.3.2, www/rubygem-puma 8.0.2, www/rubygem-rack-cache 1.17.0, www/rubygem-railties70 7.0.10, www/rubygem-selenium-webdriver 4.49.0, www/rubygem-stimulus-rails-rails70 1.3.4, www/rubygem-tailwindcss-rails-rails70 1.0.0, www/rubygem-turbo-rails-rails70 2.0.12, www/rubygem-webmock 3.26.4, www/rubygem-webrick 1.9.2
- License
- MIT
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 7.0.10 | 7.0.10 | – |
| FreeBSD 15 | 7.0.10 | 7.0.10 | – |
| FreeBSD 14 | 7.0.10 | 7.0.10 | 7.0.10 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 7.0.10 | 7.0.10 | – |
| FreeBSD 14 | 7.0.10 | 7.0.10 | 7.0.10 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed (8)
The CVE record lists the packaged version 7.0.10 as affected, and no VuXML entry names the CVE. What does this mean?
Update to 7.2.3.1 fixes all 8 unaddressed CVEs.
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2026-33195 | 8.0 | 2026-03-24 | Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Storage's `DiskService#path_fo… |
| CVE-2026-33169 | 6.9 | 2026-03-24 | Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. `NumberToDelimitedConverter` uses a lookahead-based regular… |
| CVE-2026-33202 | 6.6 | 2026-03-24 | Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Storage's `DiskService#delete_… |
| CVE-2026-33174 | 6.6 | 2026-03-24 | Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, when serving files through Active Sto… |
| CVE-2026-33176 | 6.6 | 2026-03-24 | Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Sup… |
| CVE-2026-33170 | 5.3 | 2026-03-24 | Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, `SafeBuffe… |
| CVE-2026-33173 | 5.3 | 2026-03-24 | Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, `DirectUploadsController` accepts arb… |
| CVE-2026-33658 | 2.3 | 2026-03-26 | Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1 Active Storage's proxy controller does… |
VuXML only (0)
Listed in VuXML, the packaged version 7.0.10 is still in the affected range; pkg audit reports it. What does this mean?
None.
Possibly backported (1)
The CVE record only gives a range ending in a newer branch; check the branch changelog. Not counted as unaddressed. What does this mean?
This port tracks an older, still maintained branch. The CVE record only says “before X” with X in a newer branch, so it cannot tell whether this branch received the fix. This is an estimate, not a confirmation.
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2024-26144 | 5.3 | 2024-02-27 | Rails is a web-application framework. Starting with version 5.2.0, there is a possible sensitive session information leak in Active Storage. By default, Active Storage s… |
Fixed (0)
No VuXML entries for this package.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (30)
www/rubygem-rails70: Update to 7.0.10 Changes: https://github.com/rails/rails/releases09c77e577b
www/rubygem-rails70: Update to 7.0.8.7 Changes: https://github.com/rails/rails/releasesbd28119618
www/rubygem-rails70: Update to 7.0.8.6 Changes: https://github.com/rails/rails/releases85a3160a45
www/rubygem-rails70: Update to 7.0.8.5 Changes: https://github.com/rails/rails/releases40167cc793
www/rubygem-rails70: Add LICENSE_FILE - Update pkg-descr2921698443
www/rubygem-rails70: Allow build with rubygem-sqlite3 2.0.0+e53978d9d9
www/rubygem-rails70: Allow build with rubygem-sqlite3 2.0.0+960d716890
www/rubygem-rails70: Update to 7.0.8.3 Changes: https://github.com/rails/rails/releasesaaa50b063c
www/rubygem-rails70: Update to 7.0.8.1 Changes: https://github.com/rails/rails/releases59a1e86ce1
www/rubygem-rails70: Update RUN_DEPENDS - Update WWW - Change some RUN_DEPENDS to their Rails 7.0 variant Those ports will be changed to Rails 7.1. - Add rubygem-cgi and rubygem-readline-ext - Update version requirement of RUN_DEPENDS - Bump PORTREVISION for dependency change10c2749b45
www/rubygem-rails70: Update to 7.0.8 Changes: https://github.com/rails/rails/releases66d785d337
www/rubygem-rails70: Update to 7.0.7.2 Changes: https://github.com/rails/rails/releasescf400c2e32
www/rubygem-rails70: Update to 7.0.7 Changes: https://github.com/rails/rails/releases48b013e17a
www/rubygem-rails70: Use rubygem-selenium-webdriver 4.11.0+ and remove rubygem-webdrivers - Bump PORTREVISION for dependency change Reference: https://github.com/rails/rails/commit/e980f158a4d48c712024b50cf61f20ce1a0265ed9fb3a6c5f4
www/rubygem-rails70: Update to 7.0.6 Changes: https://github.com/rails/rails/releases0fbe97ef3c
*: Bump PORTREVISIONs for math/mpc update to 1.3.18d3e020ed0
www/rubygem-rails70: Update to 7.0.4.3 Changes: https://github.com/rails/rails/releasesb1c56f1e55
www/rubygem-rails70: Update to 7.0.4.2 Changes: https://github.com/rails/rails/releases6f2fcabe86
Mk/**ruby.mk: Switch from USE_RUBY=yes to USES=ruby
Switch from Mk/bsd.ruby.mk to Mk/Uses/ruby.mk
Notable changes are.
- Mk/bsd.ruby.mk is moved to Mk/Uses/ruby.mk.
- USE_RUBY=yes is replaced with USES=ruby.
- USE_RUBY_EXTCONF is replaced with USES=ruby:extconf.
- USE_RUBY_RDOC is replaced with USES=ruby:rdoc.
- USE_RUBY_SETUP is replaces with USES=ruby:setup.
- RUBY_NO_BUILD_DEPENDS and RUBY_NO_RUN_DEPENDS are replaced with
USES=ruby:{build,none,run}.
- RUBY_REQUIRE isn't used anywhere, so removed.
- USES=gem now implies USES=ruby.
This is mainly the work of yasu@ at https://reviews.freebsd.org/D27863
I have just made some cosmetic changes and ran exp-run to test that the
tree is not in a BROKEN state.
Approved by: portmgr
Differential Revision: https://reviews.freebsd.org/D3792518c6e18276www/rubygem-rails70: Update version requirement of RUN_DEPENDS - Update WWW and clean up pkg-descr9c1e2a5780
Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
www/rubygem-rails70: Update to 7.0.3.1 Changes: https://github.com/rails/rails/releases9d13dd76a3
www/rubygem-rails70: Update to 7.0.3 Changes: https://github.com/rails/rails/releases8bda58dbec
www/rubygem-rails70: Update to 7.0.2.4 Changes: https://github.com/rails/rails/releases55564fd202
www/rubygem-rails70: Update to 7.0.2.3 Changes: https://github.com/rails/rails/releases80ed6ec8a9
www/rubygem-rails70: Update to 7.0.2 Changes: https://github.com/rails/rails/releases12da705d81
www/rubygem-rails70: Update to 7.0.1 Changes: https://github.com/rails/rails/releases43c435e383
www/rubygem-rails70: Add rubygem-rails70 7.0.0 Rails is a web-application framework that includes everything needed to create database-backed web applications according to the Model-View-Controller (MVC) pattern. Understanding the MVC pattern is key to understanding Rails. MVC divides your application into three layers: Model, View, and Controller, each with a specific responsibility. Active Record, Active Model, Action Pack, and Action View can each be used independently outside Rails. In addition to that, Rails also comes with Action Mailer, a library to generate and send emails; Action Mailbox, a library to receive emails within a Rails application; Active Job, a framework for declaring jobs and making them run on a variety of queuing backends; Action Cable, a framework to integrate WebSockets with a Rails application; Active Storage, a library to attach cloud and local files to Rails applications; Action Text, a library to handle rich text content; and Active Support, a collection of utility classes and standard library extensions that are useful for Rails, and may also be used independently outside Rails. WWW: https://rubyonrails.org/ WWW: https://github.com/rails/railse7daec24ef