actionpack 7.0.2 → 7.0.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 14ae32d28d0aba5f71f808a53ff96e6fda6a169c1c81928c7e045dc7a05282da
-  data.tar.gz: 8c2dc4cf28689200036dad8a838e81469f61a58994e9e96f85426b0776b76ca4
+  metadata.gz: 795c0a2047a083919634d2ed26a7f90ecc525c7c99c40250490bf795d5c6728a
+  data.tar.gz: 2e2fb5a8852b9aaf5edfd0cc633090a1997c8fd5cc898afd3ebd765036b111b0
 SHA512:
-  metadata.gz: b72cfbbee4548cac05daa8e4b575e1b5e84dbb1b01ddb6da4876a02c5c7a1ec18712d6f4092e7cfe7634d6347b88de68059b0147a768bf87fc8954138cd44095
-  data.tar.gz: 5e30f0f96847a0d01a671f2f0eec3913901d07317f8c94220f62b49925f1227f5ab1f0248ebbd8b85ada29b05d23967da78b8bb87890e18950120598548958f4
+  metadata.gz: c4db138c3a46d37c5b4e776bb8d93555fdfc778454c956e07cda57f79c6c44a1685a0f26ddc789609af99542e219de7fb2038904de107f81cef5bf959c92e080
+  data.tar.gz: f4bee6da02dc0d53f930c95e61db8e5b2e435284489719ae5a0cff946ac270191a330d6211a0a9595f2fea1ac69af1170fb7cafa5e28a8990d2b8cd44d9f9638

data/CHANGELOG.md

@@ -1,3 +1,12 @@
+## Rails 7.0.2.1 (February 11, 2022) ##
+
+*   Under certain circumstances, the middleware isn't informed that the
+    response body has been fully closed which result in request state not
+    being fully reset before the next request
+
+    [CVE-2022-23633]
+
+
 ## Rails 7.0.2 (February 08, 2022) ##
 
 *   No changes.

data/lib/action_dispatch/middleware/executor.rb

@@ -9,7 +9,7 @@ module ActionDispatch
     end
 
     def call(env)
-      state = @executor.run!
+      state = @executor.run!(reset: true)
       begin
         response = @app.call(env)
         returned = response << ::Rack::BodyProxy.new(response.pop) { state.complete! }

data/lib/action_pack/gem_version.rb

@@ -10,7 +10,7 @@ module ActionPack
     MAJOR = 7
     MINOR = 0
     TINY  = 2
-    PRE   = nil
+    PRE   = "1"
 
     STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: actionpack
 version: !ruby/object:Gem::Version
-  version: 7.0.2
+  version: 7.0.2.1
 platform: ruby
 authors:
 - David Heinemeier Hansson
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-02-08 00:00:00.000000000 Z
+date: 2022-02-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.0.2
+        version: 7.0.2.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.0.2
+        version: 7.0.2.1
 - !ruby/object:Gem::Dependency
   name: rack
   requirement: !ruby/object:Gem::Requirement
@@ -98,28 +98,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.0.2
+        version: 7.0.2.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.0.2
+        version: 7.0.2.1
 - !ruby/object:Gem::Dependency
   name: activemodel
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.0.2
+        version: 7.0.2.1
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.0.2
+        version: 7.0.2.1
 description: Web apps on Rails. Simple, battle-tested conventions for building and
   testing MVC web applications. Works with any Rack-compatible server.
 email: david@loudthinking.com
@@ -310,12 +310,12 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/rails/rails/issues
-  changelog_uri: https://github.com/rails/rails/blob/v7.0.2/actionpack/CHANGELOG.md
-  documentation_uri: https://api.rubyonrails.org/v7.0.2/
+  changelog_uri: https://github.com/rails/rails/blob/v7.0.2.1/actionpack/CHANGELOG.md
+  documentation_uri: https://api.rubyonrails.org/v7.0.2.1/
   mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
-  source_code_uri: https://github.com/rails/rails/tree/v7.0.2/actionpack
+  source_code_uri: https://github.com/rails/rails/tree/v7.0.2.1/actionpack
   rubygems_mfa_required: 'true'
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -331,8 +331,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements:
 - none
-rubygems_version: 3.2.32
-signing_key: 
+rubygems_version: 3.2.22
+signing_key:
 specification_version: 4
 summary: Web-flow and rendering framework putting the VC in MVC (part of Rails).
 test_files: []