Ruby on Rails v6.1.2.1, v6.0.3.5 and v5.2.4.5 released!

[NewsBot]

Ruby on Rails v6.1.2.1, v6.0.3.5 and v5.2.4.5 has been released.

Active Support

• No changes.

Active Model

• No changes.

Active Record

• Fix possible DoS vector in PostgreSQL money type

  Carefully crafted input can cause a DoS via the regular expressions used
  for validating the money format in the PostgreSQL adapter. This patch
  fixes the regexp.

  Thanks to @dee-see from Hackerone for this patch!

  [CVE-2021-22880]

  Aaron Patterson

Action View

• No changes.

…

Link: Release 6.1.2.1 · rails/rails · GitHub

Active Support

• No changes.

Active Model

• No changes.

Active Record

• Fix possible DoS vector in PostgreSQL money type

  Carefully crafted input can cause a DoS via the regular expressions used
  for validating the money format in the PostgreSQL adapter. This patch
  fixes the regexp.

  Thanks to @dee-see from Hackerone for this patch!

  [CVE-2021-22880]

  Aaron Patterson

Action View

• No changes.

#…

Link: Release 6.0.3.5 · rails/rails · GitHub

Active Support

• No changes.

Active Model

• No changes.

Active Record

• Fix possible DoS vector in PostgreSQL money type

  Carefully crafted input can cause a DoS via the regular expressions used
  for validating the money format in the PostgreSQL adapter. This patch
  fixes the regexp.

  Thanks to @dee-see from Hackerone for this patch!

  [CVE-2021-22880]

  Aaron Patterson

Action View

• No changes.

Ac…

Link: Release 5.2.4.5 · rails/rails · GitHub

[bot]

Corresponding tweet for this thread:

https://twitter.com/dev_talk/status/1359610274253336577

Share link for this tweet.

---

Related portals:

Ruby on Rails Web Framework | Devtalk

Ruby Programming Language | Devtalk